last executing test programs: 574.308349ms ago: executing program 3 (id=6129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212"], 0x10}}, 0x0) 573.850479ms ago: executing program 2 (id=6131): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 573.459748ms ago: executing program 3 (id=6132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2"], 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f0000000500)=ANY=[], 0x1, 0x122e, &(0x7f0000002300)="$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") rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000001300)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 478.14816ms ago: executing program 2 (id=6134): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xf4ff) 438.436881ms ago: executing program 4 (id=6136): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000ac4010000060a0b040000000000000000020000004c000480340001800b000100746172676574000024000280090001004d41524b000000000c00030002b51112d439c5920800024000000002140001800b0001006c6f6f6b75700000040002800900010073797a30000000000900020073797a32"], 0x1ec}}, 0x0) 327.870913ms ago: executing program 3 (id=6139): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000007b00000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x3, 0x7fffffff, 0x80000000, 0x2}}}}]}, 0x48}}, 0x0) 324.080964ms ago: executing program 4 (id=6140): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x80, 0x18) lseek(r2, 0x3, 0x0) getdents(r2, 0x0, 0x58) 297.035344ms ago: executing program 4 (id=6143): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x5, 0x7, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002fc0)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14}}]}, 0x88}}, 0x0) 261.836955ms ago: executing program 0 (id=6144): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000656000/0x3000)=nil, 0x3000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 252.007285ms ago: executing program 3 (id=6145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x38, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}}, 0x0) 248.845715ms ago: executing program 1 (id=6146): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x51}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002a40)=@newtaction={0x88c, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x5, 0xc4e, 0x3, 0x5, 0xfffffffc, 0x0, 0x0, 0xfffffff7, 0x1000, 0x4c10, 0x5, 0x6, 0x8, 0x3, 0x1, 0x4, 0x8001, 0x5, 0x9, 0x7, 0x9, 0x1, 0x80000001, 0x49, 0x836, 0x6, 0x2, 0x4, 0x5, 0x1, 0x1ff, 0x4, 0x9, 0x3, 0x6e89, 0x7, 0x8, 0x6, 0x8, 0x3, 0x3, 0x3, 0x6, 0x5, 0x80000001, 0x4d, 0x2, 0x3, 0x7, 0x40, 0xe, 0x9, 0x9, 0x5, 0xfffffffd, 0xada8, 0x1, 0x7cf816ed, 0x6, 0x9, 0x1, 0x7f, 0x10001, 0x3ff, 0xc, 0x5, 0x336, 0xab0a, 0x5, 0x400, 0xff, 0x1000, 0xfffffff7, 0x7, 0x3, 0x4, 0x1000, 0x4, 0x4, 0xffff, 0x4, 0x9, 0x7, 0xd, 0x8, 0x6, 0x8, 0x1, 0x6, 0xfffff2f9, 0x9, 0x2, 0x2f05, 0x6, 0x800, 0x8, 0x5, 0x5, 0x2, 0x5, 0x80000000, 0x6, 0x4, 0x80000001, 0x4, 0x202e, 0x3, 0xfffffffb, 0xe5a, 0xad03, 0x5, 0x401, 0x6, 0x0, 0x6, 0xcec1, 0xffffffff, 0x6, 0x8, 0x4, 0x1, 0x8, 0x5, 0x5, 0xb8, 0xb28, 0x2, 0x5, 0x7fffffff, 0x0, 0x60, 0x9, 0x6, 0x9, 0x4, 0x9, 0x80000001, 0x9, 0x6, 0x7fff, 0x100, 0x412d, 0x98ad, 0x3, 0x7fff, 0xffffffff, 0x16e5, 0x10000, 0x8, 0x80000000, 0xd, 0x7, 0x4ca7, 0x9, 0x6, 0x1, 0x3, 0xffff8001, 0x2, 0x9, 0x6, 0x6, 0x2, 0x5a5a605, 0xc7f, 0xb9f, 0x8, 0xa, 0x4, 0x0, 0x4, 0x80000000, 0x58, 0x5, 0x0, 0x9, 0x0, 0xff, 0x80000000, 0x9, 0x1, 0x7b, 0x0, 0x3, 0xffffe209, 0x7, 0x2000000, 0x9, 0x2, 0x800, 0x7, 0xffff, 0x8, 0xadcd, 0x4, 0x7, 0x2, 0x9, 0x8, 0x4, 0x7, 0x8, 0x6, 0x101, 0x600, 0x5, 0xd, 0x9, 0x1, 0x10000, 0x3cba, 0xc, 0xff, 0xab3, 0xa1f2, 0x800, 0x3, 0x1, 0x4, 0x7fffffff, 0x2, 0x0, 0x80000000, 0x3, 0x3, 0x10000, 0x6, 0x2, 0x4, 0xa2d7038, 0xd, 0x0, 0x0, 0x6, 0x0, 0x5, 0x3, 0x3f, 0x8, 0xae4d, 0x3, 0x28, 0xe3, 0x7cc9, 0x8001, 0x800, 0xc, 0x2, 0x0, 0x0, 0x8, 0xff, 0x0, 0xe891, 0xe9]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x6, 0x5, 0x9, 0xffffffdb, 0x6, 0x1, 0x9, 0x34f, 0x3, 0x6, 0x7, 0x986b, 0x40, 0x8, 0x7f, 0x3, 0x9, 0x9, 0x9, 0x7fff, 0x3, 0x86, 0x6, 0x5, 0x532c, 0xfffffffb, 0x0, 0xedba, 0x6, 0x2, 0x8, 0x8001, 0xffff, 0xffff7f6f, 0x6, 0x0, 0x8, 0x4, 0x3, 0x1000, 0x9, 0x5, 0x7, 0x5, 0xfffffffb, 0xfff, 0x5, 0x8, 0x7fe703d2, 0x4, 0x8001, 0x55e, 0x3, 0x7, 0x6, 0xe, 0xe2f6, 0x3, 0xfffffc14, 0x4, 0xfffffff1, 0x2, 0x5, 0x6, 0xc5, 0x0, 0xd, 0x8, 0x5, 0xdcc, 0x300000, 0xffff, 0x10001, 0xfffffffd, 0x5a, 0x6, 0x2, 0x1, 0x0, 0x9, 0x1, 0x4, 0xf, 0x800, 0x1b6, 0x7, 0xf, 0x81c5, 0xfffffffa, 0xd, 0x9, 0xfffffffd, 0x6, 0x10001, 0x1020000, 0x4, 0x22c5, 0x2, 0x2, 0x0, 0x9aa7, 0x14a476c4, 0xd54, 0x1, 0x39e, 0x2, 0x8003ff, 0x0, 0x5d02, 0x8, 0x7, 0xff, 0x2dd8, 0x7, 0x3, 0xff, 0x6, 0x3, 0x6, 0x7, 0x713a, 0x9, 0x400, 0x1, 0x4e, 0x80, 0x9, 0x8, 0x8, 0x80000000, 0x8, 0x6, 0x3, 0x5, 0x2, 0x2, 0x6, 0x7fff, 0x4, 0x2, 0x4, 0x2, 0x8, 0x6, 0x1, 0x4, 0x5, 0x2, 0x10, 0x8, 0x0, 0xfe3, 0x8, 0xee, 0x2, 0x8, 0x0, 0x400, 0x7, 0xe45, 0x5, 0x2, 0x80, 0x3, 0x398, 0x40, 0x6, 0x2d4, 0x3, 0x7, 0x6, 0x26, 0x200, 0x1bb, 0x1ff, 0x3, 0x800000, 0x502e, 0x3, 0x8, 0x4, 0x7, 0x80000001, 0xce, 0x9, 0x1, 0x9, 0x1000, 0xffff, 0x7, 0x2, 0x2, 0x5, 0x9, 0x10000000, 0xfffffffd, 0xd, 0x3, 0xdf3, 0x1, 0x910, 0x3ff, 0x9, 0x8, 0x4, 0x1ff, 0x7fff, 0x401, 0x6249d0dd, 0x2e01, 0x1, 0x9, 0x5, 0x7fffffff, 0x361, 0xfffffc01, 0x6, 0x337, 0x28, 0x6, 0x1, 0x6fa, 0x8001, 0x400, 0x0, 0x7, 0xffffffff, 0xfffffff7, 0xfffffff9, 0x7a2, 0x0, 0x8, 0x200, 0xa40, 0x4, 0xfff, 0x1, 0x3, 0x3, 0xf, 0x400, 0x4, 0x4b4, 0x0, 0x7e, 0x5, 0x960, 0x8, 0xff, 0x98e, 0xfffffff9, 0x800, 0x2, 0x9, 0x1a]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x81, 0x2, 0x4, 0x8, 0xf, {0xd, 0x0, 0x2, 0x4, 0x0, 0x3}, {0x2, 0x2, 0x5, 0x5a, 0x2, 0x9}, 0x23a, 0x7, 0xd000000}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88c}}, 0x0) 245.331835ms ago: executing program 4 (id=6147): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) 222.680906ms ago: executing program 0 (id=6148): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x6) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x1, 0x0) getdents64(r2, 0x0, 0x22) 221.052315ms ago: executing program 1 (id=6149): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x7, 0x1, 0xfff, 0x2, 0x5, 0xfffffffe}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 216.640536ms ago: executing program 2 (id=6150): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x100, 0x4, 0x1b0}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x1f, 0x3}]}, 0x1, 0x1}, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x2, r0, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 209.729986ms ago: executing program 3 (id=6151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xfff, 0x40, 0x172}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0439000025"], 0x33fe0) 192.337516ms ago: executing program 0 (id=6152): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2010800, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)) 191.981736ms ago: executing program 4 (id=6153): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b00)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 139.649287ms ago: executing program 2 (id=6154): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 139.342547ms ago: executing program 0 (id=6155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1ff, 0x1, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x2}, {0xffe5}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 138.244057ms ago: executing program 1 (id=6156): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 112.140337ms ago: executing program 4 (id=6157): socket$nl_sock_diag(0x10, 0x3, 0x4) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./bus\x00', 0x0, &(0x7f0000002480)=ANY=[], 0x1, 0x11f4, &(0x7f0000001280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_clone(0x20000, 0x0, 0x1e, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x8800000) 95.191818ms ago: executing program 1 (id=6158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r1, 0x0, 0x1}, 0x18) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)=@chain) 94.820848ms ago: executing program 3 (id=6159): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x29e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x268, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x400000000000027e, 0x40}}}}}}}, 0x0) 65.911919ms ago: executing program 1 (id=6160): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x33}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = pidfd_getfd(r2, r2, 0x0) setns(r3, 0x6a000080) 65.720549ms ago: executing program 0 (id=6161): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000046c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x2, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x40000000, 0x1000, 0x6, 0x0, 0x0, 0x8000002, 0x0, 0x7e150a0b, 0x0, 0x80005, 0x0, 0x0, 0x4, 0x4, 0x0, 0x100000, 0x0, 0x43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x10000, 0x5d2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf7fffffe, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1007, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x40000000, 0x3, 0x3, 0x6, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x9, 0x0, 0x3, 0x7, 0xfbfffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x4fd, 0x2000, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x7e98263b, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x6, 0x10000000, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd2d1, 0x0, 0x0, 0xb2e, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xff, 0x1000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xc3f3, 0x1, 0x0, 0x800, 0x9, 0x800, 0x0, 0x8, 0xe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8000, 0x0, 0xfffffffd, 0x0, 0x0, 0xd819ac9, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x80000001, 0x0, 0x10, 0x20, 0x4, 0x400000b2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1000, 0x100, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffd, 0x1, 0x1, 0xfffffffe, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x4, 0x0, 0x0, 0x20000040, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x8000, 0x1ff, 0x23, 0xaaf0]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xc0000001}, {0x3, 0x0, 0xf, 0x0, 0x1, 0xffffffff}, 0x7, 0x10, 0x2000000}}]}}]}, 0x45c}}, 0x0) 65.478258ms ago: executing program 2 (id=6162): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f00000004c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x2, 0x4004040) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) 385.52µs ago: executing program 1 (id=6163): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x45bd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(r2) 220.68µs ago: executing program 2 (id=6164): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb"], 0x0, 0x49, 0x0, 0x1}, 0x28) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r2, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 0s ago: executing program 0 (id=6165): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x21) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x21) r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) dup2(r3, r2) kernel console output (not intermixed with test programs): isk_device_t tclass=blk_file permissive=0 [ 83.931770][ T29] audit: type=1400 audit(83.851:5510): avc: denied { map_create } for pid=11014 comm="syz.4.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.950457][ T29] audit: type=1400 audit(83.851:5511): avc: denied { prog_load } for pid=11014 comm="syz.4.2246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 83.969045][ T29] audit: type=1400 audit(83.881:5512): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 83.992908][ T29] audit: type=1400 audit(83.901:5513): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.016439][ T29] audit: type=1400 audit(83.901:5514): avc: denied { map_create } for pid=11016 comm="syz.4.2247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 84.512945][T11085] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 84.588425][T11093] netlink: 'syz.0.2291': attribute type 10 has an invalid length. [ 84.599916][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.607072][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.644477][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.651617][T11093] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.659011][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.666086][T11093] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.675537][T11093] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 84.676065][T11100] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2291'. [ 84.701057][T11100] bridge_slave_1: left allmulticast mode [ 84.706786][T11100] bridge_slave_1: left promiscuous mode [ 84.712568][T11100] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.721854][T11100] bridge_slave_0: left promiscuous mode [ 84.727596][T11100] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.766787][T11100] bond0: (slave bridge0): Releasing backup interface [ 84.947311][T11119] serio: Serial port ptm0 [ 85.353973][T11177] netlink: 'syz.3.2319': attribute type 21 has an invalid length. [ 85.374954][T11177] netlink: 'syz.3.2319': attribute type 1 has an invalid length. [ 85.382778][T11177] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2319'. [ 85.525059][T11192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2326'. [ 85.978922][T11285] netlink: 'syz.1.2367': attribute type 9 has an invalid length. [ 85.986782][T11285] netlink: 'syz.1.2367': attribute type 6 has an invalid length. [ 86.620183][T11353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.737124][T11374] netlink: 'syz.0.2403': attribute type 4 has an invalid length. [ 86.745443][T11374] netlink: 'syz.0.2403': attribute type 4 has an invalid length. [ 86.804725][T11386] netlink: 348 bytes leftover after parsing attributes in process `syz.3.2409'. [ 86.875453][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 86.888121][T11399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2416'. [ 86.888515][ T3431] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.930474][ T3431] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.941155][ T3431] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 86.950638][ T3431] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 87.006664][T11424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2426'. [ 87.015926][T11424] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2426'. [ 87.047653][T11431] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2431'. [ 87.415467][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2464'. [ 87.466631][T11514] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 87.473242][T11514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 87.480762][T11514] vhci_hcd vhci_hcd.0: Device attached [ 87.489724][T11515] vhci_hcd: connection closed [ 87.489864][ T52] vhci_hcd: stop threads [ 87.498829][ T52] vhci_hcd: release socket [ 87.503418][ T52] vhci_hcd: disconnect device [ 87.926655][T11569] caif0: left promiscuous mode [ 87.931744][T11569] vlan0: left promiscuous mode [ 87.936753][T11569] bond1: left promiscuous mode [ 87.941757][T11569] bridge2: left promiscuous mode [ 87.946856][T11569] bond2: left promiscuous mode [ 88.195914][T11617] netlink: 'syz.2.2511': attribute type 1 has an invalid length. [ 88.215414][T11617] bond0: entered promiscuous mode [ 88.221315][T11617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.267554][T11617] 8021q: adding VLAN 0 to HW filter on device bond3 [ 88.276501][T11617] bond0: (slave bond3): making interface the new active one [ 88.283902][T11617] bond3: entered promiscuous mode [ 88.289827][T11617] bond0: (slave bond3): Enslaving as an active interface with an up link [ 88.821886][ T29] kauditd_printk_skb: 1309 callbacks suppressed [ 88.821901][ T29] audit: type=1326 audit(88.800:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c55521785 code=0x7ffc0000 [ 88.874583][ T29] audit: type=1326 audit(88.800:6825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c55521785 code=0x7ffc0000 [ 88.894289][ T3309] audit: audit_backlog=65 > audit_backlog_limit=64 [ 88.897424][ T29] audit: type=1326 audit(88.800:6826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c55521785 code=0x7ffc0000 [ 88.897450][ T29] audit: type=1326 audit(88.800:6827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c55521785 code=0x7ffc0000 [ 88.903995][ T3309] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 88.926733][ T29] audit: type=1326 audit(88.800:6828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c55521785 code=0x7ffc0000 [ 88.949733][ T3309] audit: backlog limit exceeded [ 88.957340][ T29] audit: type=1326 audit(88.800:6829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c55521785 code=0x7ffc0000 [ 89.007797][ T29] audit: type=1326 audit(88.800:6830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11740 comm="syz.4.2536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f2c55521785 code=0x7ffc0000 [ 89.251512][T11844] netlink: 'syz.1.2582': attribute type 21 has an invalid length. [ 89.290597][T11851] netlink: 'syz.3.2589': attribute type 10 has an invalid length. [ 89.303945][T11851] team0: Port device dummy0 added [ 89.345114][T11851] team0: Port device dummy0 removed [ 89.353520][T11851] : (slave dummy0): Enslaving as an active interface with an up link [ 89.374045][T11860] bond4 (unregistering): Released all slaves [ 89.399943][T11937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.409630][T11937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.419564][T11937] bond0 (unregistering): Released all slaves [ 89.728375][T12044] __nla_validate_parse: 2 callbacks suppressed [ 89.728394][T12044] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2629'. [ 90.249855][T12159] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.379636][T12203] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2693'. [ 90.395512][T12205] IPVS: Scheduler module ip_vs_ not found [ 90.444620][T12216] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 90.531840][T12238] validate_nla: 1 callbacks suppressed [ 90.531856][T12238] netlink: 'syz.4.2709': attribute type 10 has an invalid length. [ 90.548675][T12238] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 90.559827][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2709'. [ 90.569044][T12238] bridge_slave_0: left promiscuous mode [ 90.574906][T12238] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.584197][T12238] bond0: (slave bridge0): Releasing backup interface [ 90.895198][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2736'. [ 90.904284][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2736'. [ 90.913981][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2736'. [ 90.923123][T12296] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2736'. [ 90.938042][T12300] pim6reg1: entered promiscuous mode [ 90.943529][T12300] pim6reg1: entered allmulticast mode [ 91.081448][T12318] Falling back ldisc for ttyS3. [ 91.112588][T12342] vxlan0: left promiscuous mode [ 91.117807][T12342] bond1: left promiscuous mode [ 91.122676][T12342] bond2: left promiscuous mode [ 91.127585][T12342] bond3: left promiscuous mode [ 91.132872][T12342] geneve2: left promiscuous mode [ 91.140430][ T12] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.161614][ T12] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.174620][ T12] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.183911][ T12] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.361914][T12383] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12383 comm=syz.0.2772 [ 92.607685][T12556] pim6reg1: entered promiscuous mode [ 92.701143][T12581] A link change request failed with some changes committed already. Interface Q6\bY4 may have been left with an inconsistent configuration, please check. [ 92.962008][T12638] netlink: 'syz.3.2883': attribute type 4 has an invalid length. [ 92.970213][T12638] netlink: 'syz.3.2883': attribute type 4 has an invalid length. [ 93.458263][T12735] netlink: 'syz.0.2930': attribute type 1 has an invalid length. [ 93.466209][T12735] netlink: 'syz.0.2930': attribute type 2 has an invalid length. [ 93.803850][T12756] netlink: 'syz.0.2938': attribute type 1 has an invalid length. [ 93.831226][ T29] kauditd_printk_skb: 1648 callbacks suppressed [ 93.831243][ T29] audit: type=1400 audit(93.800:8455): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 93.877633][ T29] audit: type=1400 audit(93.850:8456): avc: denied { read } for pid=12762 comm="syz.4.2943" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=0 [ 93.900315][ T29] audit: type=1400 audit(93.850:8457): avc: denied { map_create } for pid=12762 comm="syz.4.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.918952][ T29] audit: type=1400 audit(93.850:8458): avc: denied { prog_load } for pid=12762 comm="syz.4.2943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 93.960611][T12756] 8021q: adding VLAN 0 to HW filter on device bond2 [ 93.986252][T12765] bond2: (slave veth0_to_bond): making interface the new active one [ 94.029776][ T29] audit: type=1400 audit(93.860:8459): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.042675][T12765] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 94.053473][ T29] audit: type=1400 audit(93.930:8460): avc: denied { module_request } for pid=12761 comm="syz.2.2942" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=0 [ 94.084232][ T29] audit: type=1400 audit(93.930:8461): avc: denied { sys_module } for pid=12761 comm="syz.2.2942" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=0 [ 94.104776][ T29] audit: type=1400 audit(93.930:8462): avc: denied { name_bind } for pid=12768 comm="syz.4.2944" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 94.125943][ T29] audit: type=1400 audit(93.960:8463): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 94.149458][ T29] audit: type=1400 audit(93.970:8464): avc: denied { create } for pid=12804 comm="syz.4.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 94.641966][T12887] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2980'. [ 95.609485][T13088] netlink: 'syz.4.3069': attribute type 6 has an invalid length. [ 95.666285][T13100] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3075'. [ 95.675571][T13100] 0X: renamed from caif0 [ 95.686233][T13100] 0X: entered allmulticast mode [ 95.691598][T13100] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 96.409324][T13234] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 96.417180][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 96.430594][T13236] netlink: 1343 bytes leftover after parsing attributes in process `syz.1.3138'. [ 96.442757][T13234] netlink: 'syz.3.3136': attribute type 1 has an invalid length. [ 96.450544][T13234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3136'. [ 96.463689][T13242] syzkaller0: entered promiscuous mode [ 96.469191][T13242] syzkaller0: entered allmulticast mode [ 96.476286][ T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.486498][ T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.532310][ T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.541160][ T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 96.604581][T13272] netlink: 'syz.0.3148': attribute type 21 has an invalid length. [ 96.613187][T13272] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3148'. [ 96.712322][T13286] netlink: 'syz.3.3153': attribute type 10 has an invalid length. [ 96.723631][T13286] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.758006][T13286] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.762543][T13297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3153'. [ 96.765216][T13286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.816073][T13286] : (slave bridge0): Enslaving as an active interface with an up link [ 96.825330][T13298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 96.836209][T13298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.856427][T13297] bridge_slave_0: left allmulticast mode [ 96.862174][T13297] bridge_slave_0: left promiscuous mode [ 96.867827][T13297] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.881333][T13297] : (slave bridge0): Releasing backup interface [ 96.979425][T13302] sit0: entered promiscuous mode [ 96.984573][T13302] netlink: 'syz.4.3161': attribute type 1 has an invalid length. [ 96.992376][T13302] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3161'. [ 97.111277][T13332] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3173'. [ 98.127417][T13447] netlink: 'syz.4.3201': attribute type 2 has an invalid length. [ 98.135197][T13447] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3201'. [ 98.250435][T13461] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3209'. [ 98.582380][T13505] netlink: 'syz.4.3230': attribute type 27 has an invalid length. [ 98.590667][T13505] sit0: left promiscuous mode [ 98.667825][T13505] 0X: left allmulticast mode [ 98.687800][T13505] geneve2: left allmulticast mode [ 98.744235][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.759725][T13507] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.788874][T13507] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 98.861748][ T29] kauditd_printk_skb: 1058 callbacks suppressed [ 98.861764][ T29] audit: type=1400 audit(98.840:9523): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.933437][ T29] audit: type=1400 audit(98.840:9524): avc: denied { create } for pid=13513 comm="syz.3.3233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 98.953467][ T29] audit: type=1400 audit(98.840:9525): avc: denied { mounton } for pid=13513 comm="syz.3.3233" path="/644/file0" dev="tmpfs" ino=3308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 98.975541][ T29] audit: type=1400 audit(98.870:9526): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 98.999057][ T29] audit: type=1400 audit(98.870:9527): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.022582][ T29] audit: type=1400 audit(98.890:9528): avc: denied { prog_load } for pid=13515 comm="syz.3.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.041064][ T29] audit: type=1400 audit(98.890:9529): avc: denied { execmem } for pid=13515 comm="syz.3.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 99.059787][ T29] audit: type=1400 audit(98.890:9530): avc: denied { prog_load } for pid=13515 comm="syz.3.3234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 99.078311][ T29] audit: type=1400 audit(98.890:9531): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 99.101833][ T29] audit: type=1400 audit(98.900:9532): avc: denied { create } for pid=13519 comm="syz.4.3236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 100.243197][T13718] wireguard0: entered promiscuous mode [ 100.248911][T13718] wireguard0: entered allmulticast mode [ 101.171385][T13779] __nla_validate_parse: 5 callbacks suppressed [ 101.171420][T13779] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3343'. [ 101.224610][T13779] batadv0: entered promiscuous mode [ 101.229877][T13779] batadv0: entered allmulticast mode [ 101.372546][T13801] bond2: left promiscuous mode [ 101.377466][T13801] geneve2: left promiscuous mode [ 101.391698][T13801] xfrm1: left promiscuous mode [ 101.656747][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3359'. [ 101.859866][T13847] netlink: 'syz.1.3375': attribute type 1 has an invalid length. [ 101.926312][T13847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.986061][T13879] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 102.178449][T13945] netlink: 'syz.2.3394': attribute type 1 has an invalid length. [ 102.228731][T13945] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.242275][T13961] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3399'. [ 102.269756][T13945] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 102.461345][T14033] team_slave_0: entered promiscuous mode [ 102.467124][T14033] team_slave_1: entered promiscuous mode [ 102.475096][T14033] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.491955][T14033] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 102.712532][T14083] netlink: 'syz.3.3439': attribute type 27 has an invalid length. [ 102.888349][T14083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.899965][T14083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.945228][T14083] bond0: left promiscuous mode [ 102.957045][T14083] bond3: left promiscuous mode [ 102.961912][T14083] bond4: left promiscuous mode [ 102.979946][T14088] 8021q: adding VLAN 0 to HW filter on device  [ 102.987643][T14088] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.996863][T14088] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.017015][ T3431] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.025947][ T3431] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.035978][ T3431] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.044916][ T3431] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.054285][ T3431] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.063369][ T3431] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.074192][ T3431] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.083215][ T3431] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.536516][T14142] netlink: 'syz.2.3469': attribute type 27 has an invalid length. [ 103.562881][T14142] caif0: left allmulticast mode [ 103.589235][T14142] vlan0: left allmulticast mode [ 103.594197][T14142] veth0_vlan: left allmulticast mode [ 103.603720][T14142] bond0: left promiscuous mode [ 103.608615][T14142] bond3: left promiscuous mode [ 103.618826][ T3442] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.628276][ T3442] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.645336][ T3442] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.654961][ T3442] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.871779][ T29] kauditd_printk_skb: 958 callbacks suppressed [ 103.871797][ T29] audit: type=1400 audit(103.850:10491): avc: denied { map_create } for pid=14189 comm="syz.3.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.879835][T14191] netlink: 'syz.1.3489': attribute type 27 has an invalid length. [ 103.898700][ T29] audit: type=1400 audit(103.880:10492): avc: denied { prog_load } for pid=14189 comm="syz.3.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.923662][ T29] audit: type=1400 audit(103.890:10493): avc: denied { prog_load } for pid=14189 comm="syz.3.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.942313][ T29] audit: type=1400 audit(103.890:10494): avc: denied { map_create } for pid=14189 comm="syz.3.3491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 103.961486][T14191] geneve2: left allmulticast mode [ 103.981409][T14191] xfrm1: left allmulticast mode [ 104.043326][ T29] audit: type=1400 audit(103.930:10495): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.067114][ T29] audit: type=1400 audit(103.950:10496): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.090814][ T29] audit: type=1400 audit(103.970:10497): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 104.114783][ T29] audit: type=1400 audit(103.970:10498): avc: denied { map_create } for pid=14198 comm="syz.0.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.133588][ T29] audit: type=1400 audit(103.980:10499): avc: denied { prog_load } for pid=14198 comm="syz.0.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.152649][ T29] audit: type=1400 audit(103.980:10500): avc: denied { prog_load } for pid=14198 comm="syz.0.3502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 104.229722][T14194] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.239068][T14194] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 104.254604][ T3431] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.263688][ T3431] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.285486][ T3442] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.294433][ T3442] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.303756][ T3442] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.312778][ T3442] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.321939][ T3442] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 104.330801][ T3442] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.398353][T14244] netlink: 'syz.4.3504': attribute type 1 has an invalid length. [ 104.415878][T14237] wireguard0: entered promiscuous mode [ 104.421793][T14237] wireguard0: entered allmulticast mode [ 104.454798][T14244] bond4: entered promiscuous mode [ 104.465989][T14244] 8021q: adding VLAN 0 to HW filter on device bond4 [ 104.506722][T14297] netlink: 'syz.0.3517': attribute type 10 has an invalid length. [ 104.524016][T14244] 8021q: adding VLAN 0 to HW filter on device bond5 [ 104.533113][T14244] bond4: (slave bond5): making interface the new active one [ 104.540457][T14244] bond5: entered promiscuous mode [ 104.546408][T14244] bond4: (slave bond5): Enslaving as an active interface with an up link [ 104.555003][T14299] netlink: 'syz.1.3518': attribute type 6 has an invalid length. [ 104.563112][T14297] ipvlan0: entered allmulticast mode [ 104.568435][T14297] veth0_vlan: entered allmulticast mode [ 104.591388][T14297] team0: Device ipvlan0 failed to register rx_handler [ 104.923982][T14416] netlink: 'syz.4.3559': attribute type 13 has an invalid length. [ 105.042177][T14426] netlink: 'syz.3.3574': attribute type 13 has an invalid length. [ 105.767667][T14467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3583'. [ 105.942511][T14502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3599'. [ 105.988124][T14511] syzkaller0: entered promiscuous mode [ 105.993756][T14511] syzkaller0: entered allmulticast mode [ 106.420712][T14615] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 106.463866][T14622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3650'. [ 106.488433][T14626] netlink: 1343 bytes leftover after parsing attributes in process `syz.0.3651'. [ 106.507732][T14625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3653'. [ 106.526826][T14625] bridge_slave_1: left allmulticast mode [ 106.532665][T14625] bridge_slave_1: left promiscuous mode [ 106.538548][T14625] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.560693][T14625] bridge_slave_0: left allmulticast mode [ 106.566491][T14625] bridge_slave_0: left promiscuous mode [ 106.572219][T14625] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.829580][T14671] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 106.844722][T14671] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 106.943967][T14702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3680'. [ 106.985966][T14710] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3690'. [ 107.011383][T14693] Falling back ldisc for ttyS3. [ 107.092025][T14741] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 107.121637][T14741] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 107.271448][T14771] Falling back ldisc for ttyS3. [ 107.295726][T14784] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3702'. [ 107.304819][T14784] 0X: renamed from caif0 [ 107.310988][T14784] 0X: entered allmulticast mode [ 107.316274][T14784] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 107.361772][T14790] validate_nla: 1 callbacks suppressed [ 107.361820][T14790] netlink: 'syz.4.3705': attribute type 1 has an invalid length. [ 107.375103][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'. [ 107.388711][ T12] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.397215][ T12] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.405932][T14790] netlink: 'syz.4.3705': attribute type 1 has an invalid length. [ 107.413693][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'. [ 107.422808][ T12] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.437748][ T12] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.467649][T14812] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 107.474209][T14812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.481786][T14812] vhci_hcd vhci_hcd.0: Device attached [ 107.501752][T14812] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 107.508341][T14812] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 107.515955][T14812] vhci_hcd vhci_hcd.0: Device attached [ 107.522698][T14812] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 107.529269][T14812] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.536717][T14812] vhci_hcd vhci_hcd.0: Device attached [ 107.545061][T14812] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 107.551647][T14812] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.559304][T14812] vhci_hcd vhci_hcd.0: Device attached [ 107.567304][T14812] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 107.573917][T14812] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.581363][T14812] vhci_hcd vhci_hcd.0: Device attached [ 107.595071][T14832] vhci_hcd: connection closed [ 107.595230][ T12] vhci_hcd: stop threads [ 107.595481][T14828] vhci_hcd: connection closed [ 107.599985][ T12] vhci_hcd: release socket [ 107.599998][ T12] vhci_hcd: disconnect device [ 107.604507][T14826] vhci_hcd: connection closed [ 107.620583][T14823] vhci_hcd: connection closed [ 107.625508][T14813] vhci_hcd: connection closed [ 107.630657][ T12] vhci_hcd: stop threads [ 107.639758][ T12] vhci_hcd: release socket [ 107.644217][ T12] vhci_hcd: disconnect device [ 107.652842][ T12] vhci_hcd: stop threads [ 107.657201][ T12] vhci_hcd: release socket [ 107.661685][ T12] vhci_hcd: disconnect device [ 107.676521][ T12] vhci_hcd: stop threads [ 107.680738][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3714'. [ 107.680915][ T12] vhci_hcd: release socket [ 107.680948][ T12] vhci_hcd: disconnect device [ 107.689915][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3714'. [ 107.708813][ T12] vhci_hcd: stop threads [ 107.713166][ T12] vhci_hcd: release socket [ 107.717638][ T12] vhci_hcd: disconnect device [ 107.731597][ T3395] usb 9-1: new low-speed USB device number 2 using vhci_hcd [ 107.742455][ T3395] usb 9-1: enqueue for inactive port 0 [ 107.748553][ T3395] usb 9-1: enqueue for inactive port 0 [ 107.786324][ T3395] usb 9-1: enqueue for inactive port 0 [ 107.808824][T14864] sit0: entered promiscuous mode [ 107.819644][T14864] netlink: 'syz.1.3722': attribute type 1 has an invalid length. [ 107.868565][ T3395] vhci_hcd: vhci_device speed not set [ 108.131845][T14931] netlink: 'syz.2.3762': attribute type 21 has an invalid length. [ 108.587466][T14968] netlink: 'syz.0.3770': attribute type 2 has an invalid length. [ 108.881313][ T29] kauditd_printk_skb: 1887 callbacks suppressed [ 108.881330][ T29] audit: type=1326 audit(108.860:12388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 108.937231][ T29] audit: type=1326 audit(108.860:12389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 108.960312][ T29] audit: type=1326 audit(108.860:12390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 108.983304][ T29] audit: type=1326 audit(108.860:12391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 109.006440][ T29] audit: type=1326 audit(108.860:12392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 109.029422][ T29] audit: type=1326 audit(108.860:12393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 109.052675][ T29] audit: type=1326 audit(108.860:12394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 109.075787][ T29] audit: type=1326 audit(108.860:12395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 109.098775][ T29] audit: type=1326 audit(108.860:12396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 109.121869][ T29] audit: type=1326 audit(108.860:12397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14942 comm="syz.1.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f1f0ee81785 code=0x7ffc0000 [ 110.352402][T15130] pim6reg1: entered promiscuous mode [ 110.626637][T15195] netlink: 'syz.3.3861': attribute type 12 has an invalid length. [ 111.881235][T15319] netlink: 'syz.0.3913': attribute type 1 has an invalid length. [ 111.984816][ T9] Process accounting resumed [ 111.988260][T15343] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.148971][T15374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.288783][T15400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 112.534460][T15449] sit0: entered allmulticast mode [ 112.781585][T15494] __nla_validate_parse: 13 callbacks suppressed [ 112.781599][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3991'. [ 112.796926][T15494] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3991'. [ 112.943171][T15506] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 113.383260][T15594] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4037'. [ 113.638486][T15645] bond4: entered promiscuous mode [ 113.643566][T15645] bond4: entered allmulticast mode [ 113.649128][T15645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 113.667212][T15645] bond4 (unregistering): Released all slaves [ 113.845201][T15749] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4080'. [ 113.864413][T15749] batadv1: entered promiscuous mode [ 113.869715][T15749] batadv1: entered allmulticast mode [ 113.901593][ T29] kauditd_printk_skb: 1173 callbacks suppressed [ 113.901606][ T29] audit: type=1400 audit(113.880:13571): avc: denied { read write } for pid=3311 comm="syz-executor" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 113.935654][ T29] audit: type=1400 audit(113.880:13572): avc: denied { create } for pid=15754 comm="syz.3.4081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 113.960431][ T29] audit: type=1326 audit(113.940:13573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz.0.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 113.983586][ T29] audit: type=1326 audit(113.940:13574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz.0.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 114.020422][ T29] audit: type=1326 audit(113.990:13575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz.0.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 114.043593][ T29] audit: type=1400 audit(113.990:13576): avc: denied { prog_load } for pid=15756 comm="syz.0.4082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 114.062225][ T29] audit: type=1326 audit(113.990:13577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz.0.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 114.085352][ T29] audit: type=1326 audit(113.990:13578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz.0.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 114.108417][ T29] audit: type=1326 audit(113.990:13579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz.0.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 114.131588][ T29] audit: type=1326 audit(113.990:13580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15756 comm="syz.0.4082" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 114.279797][T15783] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4095'. [ 114.308994][T15783] batadv1: entered promiscuous mode [ 114.314387][T15783] batadv1: entered allmulticast mode [ 114.362489][T15802] netem: incorrect gi model size [ 114.367537][T15802] netem: change failed [ 114.543122][T15852] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4123'. [ 114.556147][T15852] batadv1: entered promiscuous mode [ 114.561501][T15852] batadv1: entered allmulticast mode [ 114.711418][T15893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4139'. [ 114.720445][T15893] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4139'. [ 115.563889][T15984] netlink: 'syz.4.4181': attribute type 10 has an invalid length. [ 115.573778][T15984] ipvlan0: entered allmulticast mode [ 115.579125][T15984] veth0_vlan: entered allmulticast mode [ 115.585212][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4182'. [ 115.594975][T15984] team0: Device ipvlan0 failed to register rx_handler [ 115.912751][T16043] netlink: 'syz.4.4209': attribute type 13 has an invalid length. [ 115.920600][T16043] netlink: 'syz.4.4209': attribute type 17 has an invalid length. [ 116.106642][T16043] sit0: left allmulticast mode [ 116.117543][T16043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.126047][T16043] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.137247][T16043] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 117.161815][T16257] netlink: 'syz.4.4299': attribute type 4 has an invalid length. [ 117.230126][T16269] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4305'. [ 118.255172][T16429] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.262755][T16429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.270819][T16429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.278334][T16429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.918164][ T29] kauditd_printk_skb: 1332 callbacks suppressed [ 118.918180][ T29] audit: type=1400 audit(118.890:14913): avc: denied { read write } for pid=3309 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.978967][ T29] audit: type=1400 audit(118.910:14914): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop4" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.002692][ T29] audit: type=1400 audit(118.930:14915): avc: denied { read write } for pid=3298 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 119.026611][ T29] audit: type=1400 audit(118.930:14916): avc: denied { prog_load } for pid=16560 comm="syz.0.4428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.045592][ T29] audit: type=1400 audit(118.930:14917): avc: denied { map_create } for pid=16562 comm="syz.4.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.064333][ T29] audit: type=1400 audit(118.930:14918): avc: denied { prog_load } for pid=16562 comm="syz.4.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.083283][ T29] audit: type=1400 audit(118.930:14919): avc: denied { create } for pid=16562 comm="syz.4.4431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=0 [ 119.102340][ T29] audit: type=1400 audit(118.940:14920): avc: denied { map_create } for pid=16564 comm="syz.1.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.121224][ T29] audit: type=1400 audit(118.940:14921): avc: denied { prog_load } for pid=16564 comm="syz.1.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.139994][ T29] audit: type=1400 audit(118.940:14922): avc: denied { prog_load } for pid=16564 comm="syz.1.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 119.191034][T16589] __nla_validate_parse: 2 callbacks suppressed [ 119.191058][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 119.206374][T16589] netlink: 'syz.1.4441': attribute type 15 has an invalid length. [ 119.226036][ T37] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 119.239180][ T37] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 119.248106][ T37] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 119.261287][T16589] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4441'. [ 119.270320][T16589] netlink: 'syz.1.4441': attribute type 15 has an invalid length. [ 119.271892][ T37] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 119.524179][ T3395] Process accounting resumed [ 120.670660][T16797] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4502'. [ 120.681802][T16782] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.4502'. [ 120.988017][T16863] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4537'. [ 120.994563][T16865] loop4: detected capacity change from 0 to 1024 [ 121.004255][T16865] EXT4-fs: Ignoring removed orlov option [ 121.018989][T16865] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.070711][T16877] loop1: detected capacity change from 0 to 128 [ 121.077447][T16877] EXT4-fs: test_dummy_encryption option not supported [ 121.119476][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.294086][T16916] loop4: detected capacity change from 0 to 1024 [ 121.304329][T16916] EXT4-fs: Ignoring removed orlov option [ 121.310176][T16916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.353333][T16916] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.370180][T16937] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4559'. [ 121.448323][T16949] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 121.454872][T16949] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 121.462438][T16949] vhci_hcd vhci_hcd.0: Device attached [ 121.479021][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.490937][T16950] vhci_hcd: connection closed [ 121.491156][ T3442] vhci_hcd: stop threads [ 121.500188][ T3442] vhci_hcd: release socket [ 121.504687][ T3442] vhci_hcd: disconnect device [ 121.559858][T16968] loop2: detected capacity change from 0 to 128 [ 121.570543][T16970] netlink: 'syz.4.4568': attribute type 1 has an invalid length. [ 121.571497][T16968] EXT4-fs: Ignoring removed nobh option [ 121.578401][T16970] netlink: 198116 bytes leftover after parsing attributes in process `syz.4.4568'. [ 121.606177][T16968] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 121.809291][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 121.826813][T17050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4575'. [ 121.835823][T17050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4575'. [ 121.857139][T17050] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4575'. [ 122.431872][T17112] pim6reg1: entered promiscuous mode [ 122.437324][T17112] pim6reg1: entered allmulticast mode [ 122.578109][T17139] cgroup: Invalid name [ 122.694196][T17162] loop4: detected capacity change from 0 to 1024 [ 122.727942][T17162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.785039][T17178] pimreg: entered allmulticast mode [ 122.809163][T17178] pimreg: left allmulticast mode [ 122.906503][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.062368][T17211] loop3: detected capacity change from 0 to 2048 [ 123.083127][T17211] EXT4-fs: Ignoring removed bh option [ 123.113279][T17211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.357063][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.603999][T17259] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 123.617103][T17259] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 123.674019][T17272] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 123.772772][T17296] netlink: 'syz.3.4664': attribute type 29 has an invalid length. [ 123.782337][T17296] netlink: 'syz.3.4664': attribute type 29 has an invalid length. [ 123.832301][T17300] loop9: detected capacity change from 0 to 7 [ 123.839378][T17300] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.857604][T17300] Buffer I/O error on dev loop9, logical block 0, async page read [ 123.865493][T17300] loop9: unable to read partition table [ 123.881755][T17300] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 123.881755][T17300] ) failed (rc=-5) [ 123.939691][T17311] loop3: detected capacity change from 0 to 2048 [ 124.028802][ T29] kauditd_printk_skb: 725 callbacks suppressed [ 124.028808][T17325] SELinux: failed to load policy [ 124.028818][ T29] audit: type=1400 audit(124.000:15648): avc: denied { load_policy } for pid=17324 comm="syz.0.4675" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 124.087566][T17328] netlink: 'syz.4.4674': attribute type 4 has an invalid length. [ 124.204678][T17349] loop3: detected capacity change from 0 to 128 [ 124.231784][T17349] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.266356][ T29] audit: type=1400 audit(124.230:15649): avc: denied { name_bind } for pid=17352 comm="syz.4.4685" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 124.296573][T17349] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.3.4684: bad entry in directory: inode out of bounds - offset=1012, inode=128, rec_len=12, size=1024 fake=1 [ 124.326119][ T29] audit: type=1326 audit(124.300:15650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.349126][ T29] audit: type=1326 audit(124.300:15651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.372168][ T29] audit: type=1326 audit(124.300:15652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.395373][ T29] audit: type=1326 audit(124.300:15653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.418356][ T29] audit: type=1326 audit(124.300:15654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.441443][ T29] audit: type=1326 audit(124.300:15655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.464577][ T29] audit: type=1326 audit(124.300:15656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.488780][ T29] audit: type=1326 audit(124.400:15657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17357 comm="syz.2.4681" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 124.542769][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 124.623045][T17379] __nla_validate_parse: 7 callbacks suppressed [ 124.623062][T17379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4692'. [ 124.734576][T17389] loop4: detected capacity change from 0 to 128 [ 124.931918][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4702'. [ 124.953800][T17402] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4702'. [ 124.966787][T17389] syz.4.4697: attempt to access beyond end of device [ 124.966787][T17389] loop4: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 125.012893][T17389] syz.4.4697: attempt to access beyond end of device [ 125.012893][T17389] loop4: rw=2049, sector=185, nr_sectors = 16 limit=128 [ 125.041238][T17389] syz.4.4697: attempt to access beyond end of device [ 125.041238][T17389] loop4: rw=2049, sector=209, nr_sectors = 8 limit=128 [ 125.054889][T17389] syz.4.4697: attempt to access beyond end of device [ 125.054889][T17389] loop4: rw=2049, sector=225, nr_sectors = 8 limit=128 [ 125.104501][T17389] syz.4.4697: attempt to access beyond end of device [ 125.104501][T17389] loop4: rw=2049, sector=241, nr_sectors = 8 limit=128 [ 125.118526][T17389] syz.4.4697: attempt to access beyond end of device [ 125.118526][T17389] loop4: rw=2049, sector=257, nr_sectors = 8 limit=128 [ 125.132578][T17389] syz.4.4697: attempt to access beyond end of device [ 125.132578][T17389] loop4: rw=2049, sector=273, nr_sectors = 8 limit=128 [ 125.156688][T17389] syz.4.4697: attempt to access beyond end of device [ 125.156688][T17389] loop4: rw=2049, sector=289, nr_sectors = 8 limit=128 [ 125.170656][T17389] syz.4.4697: attempt to access beyond end of device [ 125.170656][T17389] loop4: rw=2049, sector=305, nr_sectors = 8 limit=128 [ 125.190767][T17389] syz.4.4697: attempt to access beyond end of device [ 125.190767][T17389] loop4: rw=2049, sector=321, nr_sectors = 8 limit=128 [ 125.457393][T17470] netlink: 4100 bytes leftover after parsing attributes in process `syz.2.4727'. [ 125.505433][T17476] netlink: 'syz.2.4730': attribute type 178 has an invalid length. [ 125.517288][T17474] loop4: detected capacity change from 0 to 2048 [ 125.556548][T17474] Alternate GPT is invalid, using primary GPT. [ 125.562914][T17474] loop4: p1 p2 p3 [ 125.673306][T17508] netlink: 'syz.2.4741': attribute type 10 has an invalid length. [ 125.681226][T17508] ipvlan0: entered allmulticast mode [ 125.686545][T17508] veth0_vlan: entered allmulticast mode [ 125.692828][T17508] team0: Device ipvlan0 failed to register rx_handler [ 125.719191][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4744'. [ 125.759761][T17521] loop4: detected capacity change from 0 to 2048 [ 125.777653][T17521] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.832533][ T3308] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 125.836142][ C1] hrtimer: interrupt took 46231 ns [ 125.847387][ T3308] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 125.869845][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.991712][T17541] IPv6: NLM_F_CREATE should be specified when creating new route [ 126.069009][T17550] loop3: detected capacity change from 0 to 164 [ 126.076536][T17550] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.086020][T17550] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 126.094602][T17550] Symlink component flag not implemented [ 126.100264][T17550] Symlink component flag not implemented [ 126.107499][T17550] Symlink component flag not implemented (7) [ 126.113532][T17550] Symlink component flag not implemented (116) [ 126.135537][T17552] loop2: detected capacity change from 0 to 2368 [ 126.193104][T17573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4762'. [ 126.227135][T17582] loop2: detected capacity change from 0 to 512 [ 126.243717][T17582] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.303128][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.380862][T17610] pimreg: entered allmulticast mode [ 126.400553][T17610] pimreg: left allmulticast mode [ 126.523967][T17643] loop2: detected capacity change from 0 to 128 [ 126.568085][T17643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 126.576024][T17643] FAT-fs (loop2): Filesystem has been set read-only [ 126.604989][T17643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 126.612968][T17643] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 126.652211][T17654] Buffer I/O error on dev loop2, logical block 2065, async page read [ 126.671828][T17654] Buffer I/O error on dev loop2, logical block 2066, async page read [ 126.679999][T17654] Buffer I/O error on dev loop2, logical block 2067, async page read [ 126.688569][T17654] Buffer I/O error on dev loop2, logical block 2068, async page read [ 126.697008][T17654] Buffer I/O error on dev loop2, logical block 2069, async page read [ 126.705366][T17656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4795'. [ 126.714461][T17656] netlink: 'syz.1.4795': attribute type 7 has an invalid length. [ 126.722277][T17656] netlink: 'syz.1.4795': attribute type 8 has an invalid length. [ 126.730016][T17656] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4795'. [ 126.741254][T17654] Buffer I/O error on dev loop2, logical block 2070, async page read [ 126.759588][T17654] Buffer I/O error on dev loop2, logical block 2071, async page read [ 126.784467][T17654] Buffer I/O error on dev loop2, logical block 2072, async page read [ 126.961615][T17683] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4813'. [ 127.227257][T17712] loop4: detected capacity change from 0 to 512 [ 127.244212][T17712] ext2: Unknown parameter 'smackfstransmute' [ 127.637119][T17746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=17746 comm=syz.0.4825 [ 127.649796][T17746] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17746 comm=syz.0.4825 [ 127.719952][T17759] loop3: detected capacity change from 0 to 512 [ 127.727465][T17759] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 127.771335][T17759] EXT4-fs (loop3): 1 truncate cleaned up [ 127.777363][T17759] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.958767][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.163626][T17817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4854'. [ 128.382874][T17840] block device autoloading is deprecated and will be removed. [ 128.658821][T17870] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 128.658821][T17870] program syz.3.4872 not setting count and/or reply_len properly [ 128.713782][T17878] loop0: detected capacity change from 0 to 512 [ 129.249908][ T3364] kernel write not supported for file bpf-prog (pid: 3364 comm: kworker/1:3) [ 129.365183][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 129.365252][ T29] audit: type=1400 audit(129.340:15972): avc: denied { execute } for pid=17955 comm="syz.1.4909" path="/1070/cgroup.controllers" dev="tmpfs" ino=5500 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 129.511672][ T29] audit: type=1400 audit(129.490:15973): avc: denied { write } for pid=17960 comm=77DEA105FF07 path="socket:[39290]" dev="sockfs" ino=39290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 129.611879][T17968] loop4: detected capacity change from 0 to 8192 [ 129.622145][T17968] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.653162][ T29] audit: type=1400 audit(129.630:15974): avc: denied { connect } for pid=17972 comm="syz.1.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 129.679991][T17971] __nla_validate_parse: 7 callbacks suppressed [ 129.680003][T17971] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4916'. [ 129.920549][ T29] audit: type=1400 audit(129.890:15975): avc: denied { ioctl } for pid=18025 comm="syz.1.4928" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 129.974702][T18038] loop3: detected capacity change from 0 to 512 [ 129.998491][ T29] audit: type=1400 audit(129.970:15976): avc: denied { bind } for pid=18041 comm="syz.1.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.017564][ T29] audit: type=1400 audit(129.970:15977): avc: denied { listen } for pid=18041 comm="syz.1.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.036776][ T29] audit: type=1400 audit(129.970:15978): avc: denied { accept } for pid=18041 comm="syz.1.4932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 130.057193][T18038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.071354][ T29] audit: type=1400 audit(130.040:15979): avc: denied { mount } for pid=18053 comm="syz.4.4935" name="/" dev="configfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 130.093809][ T29] audit: type=1400 audit(130.040:15980): avc: denied { search } for pid=18053 comm="syz.4.4935" name="/" dev="configfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.115587][ T29] audit: type=1400 audit(130.040:15981): avc: denied { search } for pid=18053 comm="syz.4.4935" name="/" dev="configfs" ino=2101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 130.140471][T18060] loop4: detected capacity change from 0 to 512 [ 130.146986][T18038] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 130.147503][T18060] EXT4-fs: Ignoring removed mblk_io_submit option [ 130.162113][T18060] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.182785][T18060] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.4937: iget: bogus i_mode (2355) [ 130.194838][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.204022][T18060] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4937: couldn't read orphan inode 15 (err -117) [ 130.218931][T18060] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.248677][T18069] tipc: Started in network mode [ 130.253641][T18069] tipc: Node identity ac14140f, cluster identity 4711 [ 130.260532][T18069] tipc: New replicast peer: 255.255.255.255 [ 130.266649][T18069] tipc: Enabled bearer , priority 10 [ 130.310335][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.321208][T18073] netlink: 'syz.2.4941': attribute type 3 has an invalid length. [ 130.419857][T18096] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4950'. [ 130.533083][T18114] loop4: detected capacity change from 0 to 128 [ 130.543569][T18114] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 130.582437][T18118] loop2: detected capacity change from 0 to 512 [ 130.595281][T18120] : renamed from bond0 (while UP) [ 130.612684][T18118] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.4959: error while reading EA inode 32 err=-116 [ 130.627322][T18118] EXT4-fs (loop2): Remounting filesystem read-only [ 130.638369][T18118] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 130.660830][T18118] EXT4-fs (loop2): 1 orphan inode deleted [ 130.667039][T18118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.682766][T18118] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000. [ 130.703542][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.729975][T18127] loop0: detected capacity change from 0 to 128 [ 130.746879][T18127] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.789444][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.853661][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.895175][T18160] netlink: 'syz.3.4970': attribute type 3 has an invalid length. [ 130.947814][T18171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'. [ 130.969376][T18171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4976'. [ 131.236258][T18231] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4998'. [ 131.261509][ T3395] tipc: Node number set to 2886997007 [ 131.274354][T18239] loop3: detected capacity change from 0 to 1024 [ 131.296354][T18239] EXT4-fs: Ignoring removed orlov option [ 131.322514][T18239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.422364][T18259] netlink: 'syz.2.5007': attribute type 1 has an invalid length. [ 131.430180][T18259] netlink: 198116 bytes leftover after parsing attributes in process `syz.2.5007'. [ 131.500635][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.567646][T18274] loop3: detected capacity change from 0 to 128 [ 131.593527][T18274] EXT4-fs: Ignoring removed nobh option [ 131.607723][T18274] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 131.685346][T18280] : renamed from bond0 (while UP) [ 131.726857][T18285] pim6reg1: entered promiscuous mode [ 131.732262][T18285] pim6reg1: entered allmulticast mode [ 131.755457][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.844075][T18305] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 131.850656][T18305] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.858196][T18305] vhci_hcd vhci_hcd.0: Device attached [ 131.867033][T18307] vhci_hcd: connection closed [ 131.867560][T17015] vhci_hcd: stop threads [ 131.876576][T17015] vhci_hcd: release socket [ 131.880987][T17015] vhci_hcd: disconnect device [ 131.897507][T18310] loop3: detected capacity change from 0 to 1024 [ 131.905465][T18310] EXT4-fs: Ignoring removed orlov option [ 131.911210][T18310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.932751][T18310] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.070626][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.208960][T18345] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5030'. [ 132.218425][T18345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5030'. [ 132.385941][T18375] : renamed from bond0 [ 132.443637][T18386] loop4: detected capacity change from 0 to 128 [ 132.460484][T18386] EXT4-fs: Ignoring removed nobh option [ 132.481932][T18386] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 132.589728][T18410] loop0: detected capacity change from 0 to 2048 [ 132.596472][T18410] EXT4-fs: Ignoring removed bh option [ 132.612486][T18410] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.635833][ T3308] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.686949][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.250106][T18452] loop4: detected capacity change from 0 to 1024 [ 133.257531][T18452] EXT4-fs: Ignoring removed oldalloc option [ 133.265228][T18452] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 133.292090][T18452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 133.332106][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 133.350869][T18462] loop1: detected capacity change from 0 to 128 [ 133.376120][T18462] EXT4-fs: Ignoring removed nobh option [ 133.393392][T18462] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 133.537949][ T3298] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.549855][T18488] SELinux: failed to load policy [ 133.710805][T18530] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 133.717431][T18530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.725123][T18530] vhci_hcd vhci_hcd.0: Device attached [ 133.745239][T18531] vhci_hcd: connection closed [ 133.745827][T17027] vhci_hcd: stop threads [ 133.754928][T17027] vhci_hcd: release socket [ 133.759443][T17027] vhci_hcd: disconnect device [ 133.871611][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5101'. [ 133.887544][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5101'. [ 133.985862][T18576] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 134.288537][T18582] loop9: detected capacity change from 0 to 7 [ 134.305064][T18582] buffer_io_error: 57736 callbacks suppressed [ 134.305079][T18582] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.319782][T18582] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.327730][T18582] loop9: unable to read partition table [ 134.333513][T18582] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 134.333513][T18582] ) failed (rc=-5) [ 134.388926][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 134.388943][ T29] audit: type=1326 audit(134.360:16146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.437402][T18601] loop2: detected capacity change from 0 to 2048 [ 134.453793][ T29] audit: type=1326 audit(134.400:16147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.476966][ T29] audit: type=1326 audit(134.400:16148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.500254][ T29] audit: type=1326 audit(134.400:16149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.523464][ T29] audit: type=1326 audit(134.400:16150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.546450][ T29] audit: type=1326 audit(134.400:16151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.569558][ T29] audit: type=1326 audit(134.400:16152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.592568][ T29] audit: type=1326 audit(134.400:16153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.615724][ T29] audit: type=1326 audit(134.400:16154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.638708][ T29] audit: type=1326 audit(134.400:16155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18604 comm="syz.0.5114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 134.670386][T18617] loop0: detected capacity change from 0 to 1024 [ 134.682399][T18617] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.713662][T18628] netlink: 'syz.2.5123': attribute type 29 has an invalid length. [ 134.722965][T18628] netlink: 'syz.2.5123': attribute type 29 has an invalid length. [ 134.750273][T18628] __nla_validate_parse: 1 callbacks suppressed [ 134.750293][T18628] netlink: 500 bytes leftover after parsing attributes in process `syz.2.5123'. [ 134.770985][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5124'. [ 134.785837][T18632] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5124'. [ 134.828330][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.850155][T18641] loop9: detected capacity change from 0 to 7 [ 134.858345][T18641] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.889044][T18641] Buffer I/O error on dev loop9, logical block 0, async page read [ 134.896965][T18641] loop9: unable to read partition table [ 134.903204][T18641] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 134.903204][T18641] ) failed (rc=-5) [ 135.289984][T18678] loop3: detected capacity change from 0 to 1024 [ 135.321414][T18678] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.537441][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.639705][T18691] loop2: detected capacity change from 0 to 2048 [ 135.649722][T18694] loop9: detected capacity change from 0 to 7 [ 135.664302][T18694] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.669112][T18692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5153'. [ 135.681255][T18694] Buffer I/O error on dev loop9, logical block 0, async page read [ 135.689189][T18694] loop9: unable to read partition table [ 135.696444][T18694] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 135.696444][T18694] ) failed (rc=-5) [ 135.727232][T18691] Alternate GPT is invalid, using primary GPT. [ 135.733729][T18691] loop2: p1 p2 p3 [ 135.754485][T18704] loop4: detected capacity change from 0 to 512 [ 135.757210][T18708] netlink: 'syz.1.5148': attribute type 10 has an invalid length. [ 135.769089][T18708] ipvlan0: entered allmulticast mode [ 135.770442][T18704] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.5147: error while reading EA inode 32 err=-116 [ 135.774468][T18708] veth0_vlan: entered allmulticast mode [ 135.775401][T18708] team0: Device ipvlan0 failed to register rx_handler [ 135.797877][T18704] EXT4-fs (loop4): Remounting filesystem read-only [ 135.806376][T18704] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 135.822651][T18704] EXT4-fs (loop4): 1 orphan inode deleted [ 135.828831][T18704] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.858744][T18704] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 135.883753][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.894938][T18730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 135.901569][T18730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.909141][T18730] vhci_hcd vhci_hcd.0: Device attached [ 135.919828][T18738] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 135.926435][T18738] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 135.934060][T18738] vhci_hcd vhci_hcd.0: Device attached [ 135.956911][T18730] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 135.963474][T18730] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 135.970978][T18730] vhci_hcd vhci_hcd.0: Device attached [ 135.995342][T18730] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 136.001882][T18730] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 136.009497][T18730] vhci_hcd vhci_hcd.0: Device attached [ 136.036128][T18730] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(11) [ 136.042756][T18730] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 136.050295][T18730] vhci_hcd vhci_hcd.0: Device attached [ 136.072353][T18759] vhci_hcd: connection closed [ 136.072515][T18754] vhci_hcd: connection closed [ 136.073125][T16994] vhci_hcd: stop threads [ 136.077409][T18745] vhci_hcd: connection closed [ 136.081967][T16994] vhci_hcd: release socket [ 136.081984][T16994] vhci_hcd: disconnect device [ 136.086528][T18732] vhci_hcd: connection closed [ 136.091772][T18739] vhci_hcd: connection closed [ 136.095953][T16994] vhci_hcd: stop threads [ 136.113896][T16994] vhci_hcd: release socket [ 136.118344][T16994] vhci_hcd: disconnect device [ 136.126234][T16994] vhci_hcd: stop threads [ 136.130595][T16994] vhci_hcd: release socket [ 136.135108][T16994] vhci_hcd: disconnect device [ 136.142722][T16994] vhci_hcd: stop threads [ 136.142779][T18767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5173'. [ 136.147027][T16994] vhci_hcd: release socket [ 136.155916][ T8258] usb 3-1: new low-speed USB device number 3 using vhci_hcd [ 136.160299][T16994] vhci_hcd: disconnect device [ 136.160986][T16994] vhci_hcd: stop threads [ 136.176617][T16994] vhci_hcd: release socket [ 136.181050][T16994] vhci_hcd: disconnect device [ 136.182804][ T8258] usb 3-1: enqueue for inactive port 0 [ 136.188692][T18767] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5173'. [ 136.201383][ T8258] usb 3-1: enqueue for inactive port 0 [ 136.206975][ T8258] usb 3-1: enqueue for inactive port 0 [ 136.281256][ T8258] vhci_hcd: vhci_device speed not set [ 136.352944][T18776] pimreg: entered allmulticast mode [ 136.369371][T18776] pimreg: left allmulticast mode [ 136.508037][T18796] loop3: detected capacity change from 0 to 128 [ 136.521635][T18796] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 136.785993][T18827] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5183'. [ 136.818111][T18835] loop2: detected capacity change from 0 to 1024 [ 136.829505][T18827] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5183'. [ 136.852385][T18835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.868960][T18839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5189'. [ 136.879074][ T3311] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 136.984873][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.035538][T18868] netlink: 4100 bytes leftover after parsing attributes in process `syz.4.5199'. [ 137.219027][T18906] loop3: detected capacity change from 0 to 2048 [ 137.262186][T18906] Alternate GPT is invalid, using primary GPT. [ 137.268481][T18906] loop3: p1 p2 p3 [ 137.632710][T18936] netlink: 'syz.4.5221': attribute type 3 has an invalid length. [ 137.664540][T18938] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 138.257230][T19026] netlink: 'syz.4.5261': attribute type 7 has an invalid length. [ 138.265056][T19026] netlink: 'syz.4.5261': attribute type 8 has an invalid length. [ 138.413666][T19054] loop3: detected capacity change from 0 to 512 [ 138.433167][T19054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.630016][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.778776][T19080] loop0: detected capacity change from 0 to 1024 [ 138.801895][T19080] EXT4-fs: Ignoring removed orlov option [ 138.822240][T19084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=19084 comm=syz.3.5274 [ 138.834886][T19084] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=19084 comm=syz.3.5274 [ 138.858185][T19080] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.979764][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.107845][T19115] loop3: detected capacity change from 0 to 2048 [ 139.129228][T19115] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.211889][T19120] loop4: detected capacity change from 0 to 512 [ 139.267768][T19120] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.329148][T19120] EXT4-fs (loop4): 1 truncate cleaned up [ 139.343461][ T3311] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 139.349099][T19120] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.412544][ T3311] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 139.466000][ T3311] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.504714][ T29] kauditd_printk_skb: 216 callbacks suppressed [ 139.504731][ T29] audit: type=1326 audit(139.480:16372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0ee4eec9 code=0x7ffc0000 [ 139.543093][ T29] audit: type=1326 audit(139.520:16373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0ee4eec9 code=0x7ffc0000 [ 139.603300][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.740975][T19150] loop3: detected capacity change from 0 to 128 [ 139.761290][ T29] audit: type=1326 audit(139.710:16374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0ee4eec9 code=0x7ffc0000 [ 139.784333][ T29] audit: type=1326 audit(139.710:16375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0ee4eec9 code=0x7ffc0000 [ 139.807487][ T29] audit: type=1326 audit(139.710:16376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f0ee4eec9 code=0x7ffc0000 [ 139.830601][ T29] audit: type=1326 audit(139.710:16377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f0ee4eec9 code=0x7ffc0000 [ 139.833669][T19150] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 139.853619][ T29] audit: type=1326 audit(139.710:16378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f0ee45d67 code=0x7ffc0000 [ 139.861481][T19150] FAT-fs (loop3): Filesystem has been set read-only [ 139.884266][ T29] audit: type=1326 audit(139.710:16379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f0edeaf79 code=0x7ffc0000 [ 139.884302][ T29] audit: type=1326 audit(139.710:16380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1f0ee45d67 code=0x7ffc0000 [ 139.901694][T19150] bio_check_eod: 58001 callbacks suppressed [ 139.901714][T19150] syz.3.5301: attempt to access beyond end of device [ 139.901714][T19150] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 139.913713][ T29] audit: type=1326 audit(139.710:16381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19094 comm="syz.1.5278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1f0edeaf79 code=0x7ffc0000 [ 140.003683][T19150] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 140.011620][T19150] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 140.020005][T19154] syz.3.5301: attempt to access beyond end of device [ 140.020005][T19154] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 140.033462][T19154] Buffer I/O error on dev loop3, logical block 2065, async page read [ 140.080539][T19154] syz.3.5301: attempt to access beyond end of device [ 140.080539][T19154] loop3: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 140.093888][T19154] Buffer I/O error on dev loop3, logical block 2066, async page read [ 140.143300][T19154] syz.3.5301: attempt to access beyond end of device [ 140.143300][T19154] loop3: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 140.156605][T19154] Buffer I/O error on dev loop3, logical block 2067, async page read [ 140.169212][T19154] syz.3.5301: attempt to access beyond end of device [ 140.169212][T19154] loop3: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 140.182643][T19154] Buffer I/O error on dev loop3, logical block 2068, async page read [ 140.206768][T19154] syz.3.5301: attempt to access beyond end of device [ 140.206768][T19154] loop3: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 140.220106][T19154] Buffer I/O error on dev loop3, logical block 2069, async page read [ 140.228664][T19164] loop1: detected capacity change from 0 to 2048 [ 140.235022][T19154] syz.3.5301: attempt to access beyond end of device [ 140.235022][T19154] loop3: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 140.235052][T19154] Buffer I/O error on dev loop3, logical block 2070, async page read [ 140.235079][T19154] syz.3.5301: attempt to access beyond end of device [ 140.235079][T19154] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 140.269687][T19154] Buffer I/O error on dev loop3, logical block 2071, async page read [ 140.280135][T19154] syz.3.5301: attempt to access beyond end of device [ 140.280135][T19154] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 140.293390][T19154] Buffer I/O error on dev loop3, logical block 2072, async page read [ 140.304822][T19150] syz.3.5301: attempt to access beyond end of device [ 140.304822][T19150] loop3: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 140.318163][T19150] Buffer I/O error on dev loop3, logical block 2065, async page read [ 140.373987][T19150] Buffer I/O error on dev loop3, logical block 2066, async page read [ 140.391725][T19164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.489867][T19176] loop4: detected capacity change from 0 to 512 [ 140.521086][T19178] __nla_validate_parse: 8 callbacks suppressed [ 140.521141][T19178] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5307'. [ 140.535823][ T3298] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 140.570207][ T3298] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 140.583031][ T3298] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.722224][T19192] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5310'. [ 140.727308][T19196] tipc: Started in network mode [ 140.736148][T19196] tipc: Node identity ac14140f, cluster identity 4711 [ 140.744900][T19196] tipc: New replicast peer: 255.255.255.255 [ 140.750921][T19196] tipc: Enabled bearer , priority 10 [ 140.764683][T19197] loop0: detected capacity change from 0 to 512 [ 140.772640][T19202] netlink: 76 bytes leftover after parsing attributes in process `syz.3.5312'. [ 140.785640][T19200] loop1: detected capacity change from 0 to 1024 [ 140.792772][T19197] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 140.803752][T19200] EXT4-fs: Ignoring removed orlov option [ 140.824696][T19197] EXT4-fs (loop0): 1 truncate cleaned up [ 140.830745][T19197] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.852291][T19200] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.136397][T19245] loop1: detected capacity change from 0 to 512 [ 141.144614][T19245] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.156070][T19245] EXT4-fs (loop1): 1 truncate cleaned up [ 141.183741][T19246] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.196099][T19246] vhci_hcd: invalid port number 96 [ 141.201338][T19246] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 141.236578][ T3364] kernel write not supported for file bpf-prog (pid: 3364 comm: kworker/1:3) [ 141.343805][T19266] loop2: detected capacity change from 0 to 1024 [ 141.355974][T19266] EXT4-fs: Ignoring removed orlov option [ 141.578508][T19330] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5349'. [ 141.647251][T19348] loop3: detected capacity change from 0 to 512 [ 141.869014][ T3395] tipc: Node number set to 2886997007 [ 141.992765][T19369] loop2: detected capacity change from 0 to 2048 [ 142.256554][T19355] Set syz1 is full, maxelem 65536 reached [ 142.304700][ T3309] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 142.319778][ T3309] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 142.408513][T19402] loop1: detected capacity change from 0 to 512 [ 142.641505][T19433] 9pnet_fd: Insufficient options for proto=fd [ 143.228261][T19431] Set syz1 is full, maxelem 65536 reached [ 143.339574][T19462] loop0: detected capacity change from 0 to 512 [ 143.399374][T19465] loop4: detected capacity change from 0 to 512 [ 143.417132][T19473] loop1: detected capacity change from 0 to 512 [ 143.417258][T19470] loop2: detected capacity change from 0 to 1024 [ 143.429798][T19465] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 143.430234][T19470] EXT4-fs: Ignoring removed orlov option [ 143.442619][T19473] FAT-fs (loop1): bogus logical sector size 0 [ 143.451482][T19473] FAT-fs (loop1): Can't find a valid FAT filesystem [ 143.468492][T19465] EXT4-fs (loop4): 1 truncate cleaned up [ 143.790806][T19516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 143.805703][T19515] bridge0: entered promiscuous mode [ 143.810941][T19515] macsec0: entered promiscuous mode [ 143.821000][T19515] bridge0: port 1(macsec0) entered blocking state [ 143.827624][T19515] bridge0: port 1(macsec0) entered disabled state [ 143.891019][T19515] macsec0: entered allmulticast mode [ 143.896414][T19515] bridge0: entered allmulticast mode [ 143.954270][T19515] macsec0: left allmulticast mode [ 143.959372][T19515] bridge0: left allmulticast mode [ 144.027553][T19515] bridge0: left promiscuous mode [ 144.325292][T19508] Set syz1 is full, maxelem 65536 reached [ 144.572068][T19557] loop4: detected capacity change from 0 to 512 [ 144.595283][T19557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 144.636169][T19557] EXT4-fs (loop4): 1 truncate cleaned up [ 144.653323][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 144.653389][ T29] audit: type=1326 audit(144.630:16495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0759c5d67 code=0x7ffc0000 [ 144.747609][T19562] loop0: detected capacity change from 0 to 2048 [ 144.767583][ T29] audit: type=1326 audit(144.670:16496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff07596af79 code=0x7ffc0000 [ 144.790574][ T29] audit: type=1326 audit(144.670:16497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7ff0759c5d67 code=0x7ffc0000 [ 144.813468][ T29] audit: type=1326 audit(144.670:16498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff07596af79 code=0x7ffc0000 [ 144.836483][ T29] audit: type=1326 audit(144.670:16499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 144.859583][ T29] audit: type=1326 audit(144.670:16500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 144.882645][ T29] audit: type=1326 audit(144.670:16501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff0759ceec9 code=0x7ffc0000 [ 144.905914][ T29] audit: type=1326 audit(144.670:16502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff0759cef03 code=0x7ffc0000 [ 144.929486][ T29] audit: type=1326 audit(144.670:16503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff0759cd97f code=0x7ffc0000 [ 144.952618][ T29] audit: type=1326 audit(144.720:16504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19561 comm="syz.0.5415" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7ff0759cef57 code=0x7ffc0000 [ 145.020917][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5421'. [ 145.030023][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5421'. [ 145.070162][T19588] bridge0: port 1(macsec0) entered blocking state [ 145.076759][T19588] bridge0: port 1(macsec0) entered disabled state [ 145.093138][T19588] macsec0: entered allmulticast mode [ 145.100188][T19588] macsec0: left allmulticast mode [ 145.132238][ T3307] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 145.142072][T19605] SELinux: failed to load policy [ 145.148054][ T3307] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 145.232298][T19610] veth1_to_bond: entered allmulticast mode [ 145.249362][T19610] bond_slave_1: entered promiscuous mode [ 145.264958][T19609] bond_slave_1: left promiscuous mode [ 145.270459][T19609] veth1_to_bond: left allmulticast mode [ 145.293005][T19620] loop2: detected capacity change from 0 to 512 [ 145.302915][T19618] loop1: detected capacity change from 0 to 512 [ 145.316994][T19618] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 145.335196][T19628] loop3: detected capacity change from 0 to 512 [ 145.352368][T19618] EXT4-fs (loop1): 1 truncate cleaned up [ 145.389538][T19628] FAT-fs (loop3): bogus logical sector size 0 [ 145.395712][T19628] FAT-fs (loop3): Can't find a valid FAT filesystem [ 145.516998][T19650] geneve2: entered promiscuous mode [ 145.522303][T19650] geneve2: entered allmulticast mode [ 145.909980][T19686] loop1: detected capacity change from 0 to 512 [ 146.216008][T19716] loop0: detected capacity change from 0 to 512 [ 146.227620][T19715] loop1: detected capacity change from 0 to 2048 [ 146.241435][T19716] FAT-fs (loop0): bogus logical sector size 0 [ 146.247542][T19716] FAT-fs (loop0): Can't find a valid FAT filesystem [ 146.255776][T19714] loop3: detected capacity change from 0 to 512 [ 146.283208][T19714] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 146.380141][T19714] EXT4-fs (loop3): 1 truncate cleaned up [ 146.555319][T19750] loop0: detected capacity change from 0 to 2048 [ 146.662625][ T3307] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 146.692678][ T3307] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 146.713942][T19771] netlink: 5452 bytes leftover after parsing attributes in process `syz.2.5469'. [ 146.798074][T19786] loop4: detected capacity change from 0 to 128 [ 146.861680][T19790] delete_channel: no stack [ 146.883463][T19795] loop3: detected capacity change from 0 to 1024 [ 146.893473][T19795] EXT4-fs: Ignoring removed orlov option [ 146.958343][T16981] bio_check_eod: 6655 callbacks suppressed [ 146.958360][T16981] kworker/u8:11: attempt to access beyond end of device [ 146.958360][T16981] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 147.013536][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.013536][T16981] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 147.027246][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.027246][T16981] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 147.042116][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.042116][T16981] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 147.056731][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.056731][T16981] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 147.070699][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.070699][T16981] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 147.086434][T19806] SELinux: failed to load policy [ 147.091994][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.091994][T16981] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 147.105651][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.105651][T16981] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 147.131305][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.131305][T16981] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 147.148189][T16981] kworker/u8:11: attempt to access beyond end of device [ 147.148189][T16981] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 147.342075][T19877] netlink: 64 bytes leftover after parsing attributes in process `syz.1.5495'. [ 147.363240][T19879] loop4: detected capacity change from 0 to 1024 [ 147.369883][T19879] EXT4-fs: Ignoring removed orlov option [ 147.397969][T19889] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5509'. [ 147.481513][T19909] loop4: detected capacity change from 0 to 128 [ 147.486575][T19910] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 147.491770][T19909] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.504387][T19909] FAT-fs (loop4): Filesystem has been set read-only [ 147.512684][T19909] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.520581][T19909] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000100) [ 147.541457][T19913] loop0: detected capacity change from 0 to 2048 [ 147.571697][T19921] buffer_io_error: 6654 callbacks suppressed [ 147.571711][T19921] Buffer I/O error on dev loop4, logical block 2065, async page read [ 147.587788][T19921] Buffer I/O error on dev loop4, logical block 2066, async page read [ 147.600329][T19921] Buffer I/O error on dev loop4, logical block 2067, async page read [ 147.612053][T19921] Buffer I/O error on dev loop4, logical block 2068, async page read [ 147.620464][T19921] Buffer I/O error on dev loop4, logical block 2069, async page read [ 147.640491][T19921] Buffer I/O error on dev loop4, logical block 2070, async page read [ 147.649131][T19921] Buffer I/O error on dev loop4, logical block 2071, async page read [ 147.657395][T19921] Buffer I/O error on dev loop4, logical block 2072, async page read [ 147.665813][T19921] Buffer I/O error on dev loop4, logical block 2065, async page read [ 147.673948][T19921] Buffer I/O error on dev loop4, logical block 2066, async page read [ 147.686124][T19930] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5513'. [ 147.700272][ T3307] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 147.723397][ T3307] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 147.949111][T19961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5522'. [ 147.958162][T19961] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5522'. [ 147.987175][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5525'. [ 147.996201][T19966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5525'. [ 148.005316][T19966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5525'. [ 148.031418][T19966] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5525'. [ 148.040411][T19966] netlink: 'syz.0.5525': attribute type 6 has an invalid length. [ 148.097917][T19974] loop0: detected capacity change from 0 to 128 [ 148.464649][T20000] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 148.508593][T20012] loop0: detected capacity change from 0 to 512 [ 148.518185][T20012] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 148.548209][T20012] EXT4-fs (loop0): 1 truncate cleaned up [ 148.716665][T20046] loop1: detected capacity change from 0 to 128 [ 148.726908][T20052] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000007 [ 148.741362][T20046] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.749251][T20046] FAT-fs (loop1): Filesystem has been set read-only [ 148.767146][T20042] SELinux: failed to load policy [ 148.776434][T20046] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.784347][T20046] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 148.941779][T20061] delete_channel: no stack [ 149.461650][T20114] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 149.461650][T20114] program syz.2.5571 not setting count and/or reply_len properly [ 149.464557][T20116] loop0: detected capacity change from 0 to 512 [ 149.499059][T20110] SELinux: failed to load policy [ 149.505738][T20116] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.538824][T20116] EXT4-fs (loop0): 1 truncate cleaned up [ 149.665907][T20151] raw_sendmsg: syz.0.5579 forgot to set AF_INET. Fix it! [ 149.728043][T20181] loop3: detected capacity change from 0 to 256 [ 149.763469][T20186] loop2: detected capacity change from 0 to 128 [ 149.770401][T20181] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.786270][T20186] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 149.794162][T20186] FAT-fs (loop2): Filesystem has been set read-only [ 149.801036][T20186] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 149.804633][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 149.804650][ T29] audit: type=1400 audit(149.780:16744): avc: denied { unmount } for pid=20180 comm="syz.3.5586" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 149.808903][T20186] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 149.828634][T20183] SELinux: failed to load policy [ 149.985224][ T29] audit: type=1326 audit(149.950:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20206 comm="syz.4.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c554eeec9 code=0x7ffc0000 [ 150.008340][ T29] audit: type=1326 audit(149.960:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20206 comm="syz.4.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c554eeec9 code=0x7ffc0000 [ 150.031430][ T29] audit: type=1326 audit(149.960:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20206 comm="syz.4.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7f2c554eeec9 code=0x7ffc0000 [ 150.137265][ T29] audit: type=1326 audit(150.110:16748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20206 comm="syz.4.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c554eeec9 code=0x7ffc0000 [ 150.187237][ T29] audit: type=1326 audit(150.110:16749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20206 comm="syz.4.5606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c554eeec9 code=0x7ffc0000 [ 150.258052][T20224] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 150.303907][ T29] audit: type=1326 audit(150.280:16750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20227 comm="syz.0.5602" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0759ceec9 code=0x0 [ 150.498779][T20240] SELinux: failed to load policy [ 150.529935][ T29] audit: type=1400 audit(150.500:16751): avc: denied { write } for pid=20241 comm="syz.3.5608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 150.561110][T20244] pim6reg: entered allmulticast mode [ 150.568849][T20244] pim6reg: left allmulticast mode [ 150.616092][T20256] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 150.625688][ T29] audit: type=1400 audit(150.590:16752): avc: denied { relabelfrom } for pid=20255 comm="syz.1.5615" name="" dev="pipefs" ino=45117 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 150.647874][ T29] audit: type=1400 audit(150.590:16753): avc: denied { mac_admin } for pid=20255 comm="syz.1.5615" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 150.789225][T20273] loop2: detected capacity change from 0 to 128 [ 150.797417][T20274] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 150.797417][T20274] program syz.1.5622 not setting count and/or reply_len properly [ 150.810239][T20273] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 150.822116][T20273] FAT-fs (loop2): Filesystem has been set read-only [ 150.828927][T20273] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 150.836861][T20273] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 150.852298][T20279] loop1: detected capacity change from 0 to 256 [ 150.871561][T20279] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.649305][T20329] pim6reg: entered allmulticast mode [ 151.661296][T20329] pim6reg: left allmulticast mode [ 151.807123][T20356] loop0: detected capacity change from 0 to 256 [ 151.826009][T20356] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 151.879122][T20380] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 151.965576][T20392] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 152.096206][T20434] loop2: detected capacity change from 0 to 1024 [ 152.113564][T20434] EXT4-fs mount: 34 callbacks suppressed [ 152.113577][T20434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.148118][T20434] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4193: comm syz.2.5659: Allocating blocks 449-513 which overlap fs metadata [ 152.167534][T20433] EXT4-fs (loop2): pa ffff888105b44070: logic 48, phys. 177, len 21 [ 152.175581][T20433] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 152.196150][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.340272][T20466] __nla_validate_parse: 2 callbacks suppressed [ 152.340343][T20466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5671'. [ 152.355709][T20466] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5671'. [ 152.554948][T20499] 9pnet_fd: Insufficient options for proto=fd [ 152.579088][T20505] ref_ctr_offset mismatch. inode: 0x1707 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x200000000240 [ 152.765675][T20533] loop4: detected capacity change from 0 to 512 [ 152.773253][T20533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.802794][T20533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.817035][T20533] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.5698: corrupted xattr block 19: overlapping e_value [ 152.831018][T20533] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 152.840162][T20533] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.5698: corrupted xattr block 19: overlapping e_value [ 152.854311][T20533] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 152.873904][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.406431][T20597] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5721'. [ 153.667925][T20622] netlink: 272 bytes leftover after parsing attributes in process `syz.3.5732'. [ 153.688155][T20622] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5732'. [ 153.701049][T20622] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5732'. [ 154.261288][T20716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5737'. [ 154.270372][T20716] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5737'. [ 154.413643][T20739] netlink: 'syz.1.5744': attribute type 4 has an invalid length. [ 154.449561][T20739] netlink: 'syz.1.5744': attribute type 4 has an invalid length. [ 154.657923][T20780] loop2: detected capacity change from 0 to 1024 [ 154.716293][T20780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.749928][T20780] EXT4-fs (loop2): shut down requested (2) [ 154.756128][T20780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 154.767952][T20780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 154.783958][T20780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 154.803194][T20780] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 154.822206][T20799] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 154.854587][T20799] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=11 [ 154.883162][ T29] kauditd_printk_skb: 355 callbacks suppressed [ 154.883179][ T29] audit: type=1400 audit(154.860:17109): avc: denied { rmdir } for pid=20779 comm="syz.2.5753" name="file1" dev="loop2" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.965643][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.981477][T20805] bridge0: entered promiscuous mode [ 154.993693][T20805] bridge0: port 1(macsec0) entered blocking state [ 155.000306][T20805] bridge0: port 1(macsec0) entered disabled state [ 155.007450][T20805] macsec0: entered allmulticast mode [ 155.012798][T20805] bridge0: entered allmulticast mode [ 155.022118][T20805] macsec0: left allmulticast mode [ 155.027186][T20805] bridge0: left allmulticast mode [ 155.032635][ T29] audit: type=1326 audit(155.000:17110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20808 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b03eec9 code=0x7ffc0000 [ 155.055677][ T29] audit: type=1326 audit(155.000:17111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20808 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b03eec9 code=0x7ffc0000 [ 155.078716][ T29] audit: type=1326 audit(155.000:17112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20808 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f887b03eec9 code=0x7ffc0000 [ 155.101709][ T29] audit: type=1326 audit(155.000:17113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20808 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b03eec9 code=0x7ffc0000 [ 155.124692][ T29] audit: type=1326 audit(155.090:17114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20808 comm="syz.3.5763" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f887b03eec9 code=0x7ffc0000 [ 155.148329][T20805] bridge0: left promiscuous mode [ 155.173010][ T29] audit: type=1400 audit(155.140:17115): avc: denied { setattr } for pid=20812 comm="syz.2.5761" name="file0" dev="tmpfs" ino=5702 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 155.222938][ T29] audit: type=1326 audit(155.180:17116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20820 comm="syz.2.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 155.246009][ T29] audit: type=1326 audit(155.180:17117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20820 comm="syz.2.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 155.269073][ T29] audit: type=1326 audit(155.190:17118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20820 comm="syz.2.5765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 155.388525][T20833] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 155.523431][T20845] loop4: detected capacity change from 0 to 1024 [ 155.548424][T20850] loop2: detected capacity change from 0 to 164 [ 155.559303][T20850] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 155.568170][T20845] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.610735][T20845] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.5773: Allocating blocks 449-513 which overlap fs metadata [ 155.658381][T20867] loop2: detected capacity change from 0 to 512 [ 155.688990][T20844] EXT4-fs (loop4): pa ffff888105b44310: logic 48, phys. 177, len 21 [ 155.697125][T20844] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 155.717679][T20875] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5788'. [ 155.730824][T20867] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 155.751722][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.795833][T20867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.804509][T20867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.174317][T20961] netlink: 272 bytes leftover after parsing attributes in process `syz.4.5803'. [ 156.382361][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.854665][T21109] netlink: 'syz.4.5835': attribute type 1 has an invalid length. [ 157.200610][T21146] netlink: 'syz.4.5848': attribute type 4 has an invalid length. [ 157.210622][T21146] netlink: 'syz.4.5848': attribute type 4 has an invalid length. [ 157.278729][T21168] tipc: Failed to remove unknown binding: 66,1,1/0:2786112990/2786112992 [ 157.376035][T21186] __nla_validate_parse: 4 callbacks suppressed [ 157.376052][T21186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5863'. [ 157.405136][T21186] bridge0: entered promiscuous mode [ 157.618932][T21228] bridge0: port 1(macsec1) entered blocking state [ 157.625612][T21228] bridge0: port 1(macsec1) entered disabled state [ 157.632466][T21228] macsec1: entered allmulticast mode [ 157.637828][T21228] bridge0: entered allmulticast mode [ 157.643780][T21228] macsec1: left allmulticast mode [ 157.648806][T21228] bridge0: left allmulticast mode [ 158.194435][T21291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5903'. [ 158.515822][T21336] netlink: 'syz.3.5921': attribute type 1 has an invalid length. [ 158.552663][T21336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 158.566761][T21336] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 158.575732][T21336] bond6: (slave batadv1): making interface the new active one [ 158.584649][T21336] bond6: (slave batadv1): Enslaving as an active interface with an up link [ 158.595538][T21336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5921'. [ 158.615177][T21336] bond6 (unregistering): (slave batadv1): Releasing active interface [ 158.631553][T21336] bond6 (unregistering): Released all slaves [ 158.843069][T21423] loop4: detected capacity change from 0 to 8192 [ 159.260287][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5950'. [ 159.269442][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5950'. [ 159.278466][T21474] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5950'. [ 159.288814][T21474] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5950'. [ 159.297916][T21474] netlink: 'syz.0.5950': attribute type 6 has an invalid length. [ 159.412433][T21498] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5956'. [ 159.421637][T21498] IPVS: Error connecting to the multicast addr [ 159.793169][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5964'. [ 159.806710][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5964'. [ 159.898205][ T29] kauditd_printk_skb: 617 callbacks suppressed [ 159.898220][ T29] audit: type=1326 audit(159.870:17736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4667465d67 code=0x7ffc0000 [ 159.928142][ T29] audit: type=1326 audit(159.870:17737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f466740af79 code=0x7ffc0000 [ 159.951319][ T29] audit: type=1326 audit(159.870:17738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 159.974631][ T29] audit: type=1326 audit(159.910:17739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4667465d67 code=0x7ffc0000 [ 159.997711][ T29] audit: type=1326 audit(159.910:17740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f466740af79 code=0x7ffc0000 [ 160.020725][ T29] audit: type=1326 audit(159.910:17741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 160.044424][ T29] audit: type=1326 audit(159.910:17742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4667465d67 code=0x7ffc0000 [ 160.067395][ T29] audit: type=1326 audit(159.910:17743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f466740af79 code=0x7ffc0000 [ 160.090294][ T29] audit: type=1326 audit(159.910:17744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f466746eec9 code=0x7ffc0000 [ 160.113447][ T29] audit: type=1326 audit(159.930:17745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21471 comm="syz.2.5949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4667465d67 code=0x7ffc0000 [ 160.766595][T21639] vlan2: entered allmulticast mode [ 160.771823][T21639] bridge_slave_0: entered allmulticast mode [ 160.862325][T21651] hub 8-0:1.0: USB hub found [ 160.867085][T21651] hub 8-0:1.0: 8 ports detected [ 160.899656][T21665] ref_ctr_offset mismatch. inode: 0x1723 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 161.212163][T21729] macvlan1: entered promiscuous mode [ 161.218143][T21729] ipvlan0: entered promiscuous mode [ 161.231387][T21729] ipvlan0: left promiscuous mode [ 161.240967][T21729] macvlan1: left promiscuous mode [ 161.335798][T21746] loop2: detected capacity change from 0 to 512 [ 161.444980][T21746] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 161.460638][T21746] EXT4-fs (loop2): mount failed [ 161.507924][T21761] loop2: detected capacity change from 0 to 512 [ 162.176226][T21834] loop2: detected capacity change from 0 to 128 [ 162.191928][T21834] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 162.285663][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 162.569589][T21911] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2566 sclass=netlink_xfrm_socket pid=21911 comm=syz.4.6094 [ 163.947526][T22015] loop2: detected capacity change from 0 to 128 [ 163.960874][T22015] bio_check_eod: 225276 callbacks suppressed [ 163.960886][T22015] syz.2.6134: attempt to access beyond end of device [ 163.960886][T22015] loop2: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 163.991746][T22015] syz.2.6134: attempt to access beyond end of device [ 163.991746][T22015] loop2: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 164.005203][T22015] buffer_io_error: 222822 callbacks suppressed [ 164.005229][T22015] Buffer I/O error on dev loop2, logical block 79, lost async page write [ 164.027961][T22015] syz.2.6134: attempt to access beyond end of device [ 164.027961][T22015] loop2: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 164.041479][T22015] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 164.050636][T22020] __nla_validate_parse: 14 callbacks suppressed [ 164.050653][T22020] netlink: 332 bytes leftover after parsing attributes in process `syz.4.6136'. [ 164.092333][T22025] pim6reg: entered allmulticast mode [ 164.098818][T22014] syz.2.6134: attempt to access beyond end of device [ 164.098818][T22014] loop2: rw=2049, sector=162, nr_sectors = 88 limit=128 [ 164.101197][T22025] pim6reg: left allmulticast mode [ 164.113428][T22014] syz.2.6134: attempt to access beyond end of device [ 164.113428][T22014] loop2: rw=2049, sector=138, nr_sectors = 12 limit=128 [ 164.168000][T22040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6143'. [ 164.275054][T22059] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.6151'. [ 164.287483][T22063] 9pnet_fd: Insufficient options for proto=fd [ 164.412763][T22076] loop4: detected capacity change from 0 to 8192 [ 164.419244][ T37] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.437522][ T37] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.447833][ T37] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 164.458722][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6164'. [ 164.485591][T22096] ================================================================== [ 164.493705][T22096] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 164.500832][T22096] [ 164.503171][T22096] write to 0xffff888149043674 of 2 bytes by task 22076 on cpu 1: [ 164.510983][T22096] fat16_ent_put+0x28/0x60 [ 164.515520][T22096] fat_ent_write+0x69/0xe0 [ 164.519935][T22096] fat_chain_add+0x15d/0x440 [ 164.524537][T22096] fat_get_block+0x46c/0x5e0 [ 164.529131][T22096] __block_write_begin_int+0x400/0xf90 [ 164.534693][T22096] cont_write_begin+0x5fc/0x970 [ 164.539555][T22096] fat_write_begin+0x4f/0xe0 [ 164.544161][T22096] cont_write_begin+0x1b0/0x970 [ 164.549030][T22096] fat_write_begin+0x4f/0xe0 [ 164.553622][T22096] generic_cont_expand_simple+0xad/0x150 [ 164.559265][T22096] fat_cont_expand+0x3e/0x170 [ 164.563953][T22096] fat_setattr+0x2a5/0x8a0 [ 164.568377][T22096] notify_change+0x809/0x890 [ 164.572967][T22096] do_truncate+0x13b/0x180 [ 164.577383][T22096] vfs_truncate+0x1e8/0x220 [ 164.581886][T22096] do_sys_truncate+0x91/0x130 [ 164.586568][T22096] __x64_sys_truncate+0x31/0x40 [ 164.591422][T22096] x64_sys_call+0x1a2f/0x3000 [ 164.596096][T22096] do_syscall_64+0xd2/0x200 [ 164.600605][T22096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.606499][T22096] [ 164.608816][T22096] read to 0xffff888149043600 of 512 bytes by task 22096 on cpu 0: [ 164.616612][T22096] fat_mirror_bhs+0x1df/0x320 [ 164.621291][T22096] fat_alloc_clusters+0x98b/0xa80 [ 164.626320][T22096] fat_get_block+0x258/0x5e0 [ 164.630912][T22096] __block_write_begin_int+0x400/0xf90 [ 164.636385][T22096] cont_write_begin+0x5fc/0x970 [ 164.641245][T22096] fat_write_begin+0x4f/0xe0 [ 164.645845][T22096] generic_perform_write+0x184/0x490 [ 164.651146][T22096] __generic_file_write_iter+0x9e/0x120 [ 164.656713][T22096] generic_file_write_iter+0x8d/0x2f0 [ 164.662096][T22096] __kernel_write_iter+0x2d3/0x540 [ 164.667204][T22096] dump_user_range+0x61e/0x8f0 [ 164.671976][T22096] elf_core_dump+0x1de7/0x1f80 [ 164.676746][T22096] coredump_write+0xb0f/0xe30 [ 164.681430][T22096] vfs_coredump+0x143a/0x20d0 [ 164.686111][T22096] get_signal+0xd84/0xf70 [ 164.690443][T22096] arch_do_signal_or_restart+0x96/0x440 [ 164.696004][T22096] irqentry_exit_to_user_mode+0x5b/0xa0 [ 164.701551][T22096] irqentry_exit+0x12/0x50 [ 164.705969][T22096] asm_exc_page_fault+0x26/0x30 [ 164.710814][T22096] [ 164.713127][T22096] Reported by Kernel Concurrency Sanitizer on: [ 164.719286][T22096] CPU: 0 UID: 0 PID: 22096 Comm: syz.4.6157 Not tainted syzkaller #0 PREEMPT(voluntary) [ 164.729106][T22096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 164.739166][T22096] ================================================================== [ 164.755106][ T37] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0