last executing test programs: 1m58.343854552s ago: executing program 3 (id=12292): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',access=', @ANYBLOB='?U']) 1m58.230460691s ago: executing program 3 (id=12301): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40089000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m58.091165402s ago: executing program 3 (id=12307): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x88002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 1m58.046355926s ago: executing program 3 (id=12309): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080)={[{@errors_remount}, {@noload}, {@nogrpid}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x51f, &(0x7f00000007c0)="$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") mremap(&(0x7f0000a99000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff8000/0x2000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000bfc000/0x3000)=nil, 0x3000) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m57.851821911s ago: executing program 3 (id=12320): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 1m57.713392042s ago: executing program 3 (id=12323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1m57.670749146s ago: executing program 32 (id=12323): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000b00)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a32000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 778.427117ms ago: executing program 0 (id=18629): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r0 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xfffffffd, 0x10100, 0x4, 0x37c}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[{0xc38, 0x10d, 0x5, "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"}, {0x10, 0x118, 0x6}], 0xc48}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 778.162197ms ago: executing program 0 (id=18630): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x4d}}], 0x30}, 0x0) 773.826668ms ago: executing program 0 (id=18631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) get_robust_list(0x0, &(0x7f0000000400)=0x0, &(0x7f0000000500)) 761.265519ms ago: executing program 0 (id=18632): syz_io_uring_setup(0x3fed, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x18) r1 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) 738.29358ms ago: executing program 0 (id=18634): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0107000000000000000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 679.229815ms ago: executing program 0 (id=18636): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e1d, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000180)=0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1, 0x1}, &(0x7f00000000c0)=0x8) 664.022646ms ago: executing program 5 (id=18640): mkdirat(0xffffffffffffff9c, &(0x7f0000000d40)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) link(&(0x7f0000000140)='.\x00', &(0x7f0000000180)='./file0\x00') 598.159102ms ago: executing program 5 (id=18645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001f500000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000088000000060a010400000000000000000100000008000b400000000060000480280001800e000100636f6e6e6c696d69740000001400028008000140000006e508000240000000003400018008000100636d7000280002800800024000000001140003800400010009000100efbb17b799000000080001400000000e0900010073797a30"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 594.865732ms ago: executing program 4 (id=18647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) capset(&(0x7f0000000ac0)={0x19980330}, &(0x7f0000000180)={0x0, 0x10000, 0xc898, 0x0, 0x0, 0x2}) 590.728242ms ago: executing program 5 (id=18649): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) 536.745537ms ago: executing program 4 (id=18651): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xe0901, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 536.529107ms ago: executing program 5 (id=18652): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000026000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000740)={r2, &(0x7f00000006c0)}, 0x20) 535.510516ms ago: executing program 4 (id=18654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000400000e0000000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x400000}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x50000840}, 0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1aca421, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 535.245577ms ago: executing program 5 (id=18655): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x1, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0) 470.820382ms ago: executing program 5 (id=18659): r0 = syz_io_uring_setup(0x7b66, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000740)) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0xc}, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0) 462.016813ms ago: executing program 2 (id=18661): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xb76}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x84, 0x0}, 0x0) 430.222415ms ago: executing program 2 (id=18662): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x4, 0x8}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x20}], 0x1) 395.460558ms ago: executing program 4 (id=18663): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93, 0xfc}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0xfffffffc}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x40, 0x0, 0x20000}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x10}, {0x0, 0x404, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x2000}, {}, {0x0, 0x7, 0x0, 0x1, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd}, {0xffffffff, 0x10000000}, {}, {0x0, 0x0, 0xc, 0x0, 0x0, 0x6}, {0xffffffff}, {}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x29, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1, 0x3}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x5}, {0x0, 0x0, 0x0, 0x6}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x6}, {0x0, 0x15, 0x0, 0x48510}, {}, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x4000}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0x0, 0x88}, {0x5}, {0x0, 0x1fc9}, {0x0, 0xfffffffc, 0x0, 0x3ff, 0x40000000}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x400000}, {0x4, 0x0, 0x200, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x5}, {}, {0x0, 0x0, 0x0, 0x4000, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0xfffffffd, 0x0, 0x0, 0x1, 0x800000}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x80000}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffefffff}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x2, 0x0, 0x20000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2e9c, 0x0, 0x0, 0x7}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x8000}, {0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x2}, {0x0, 0x80000000, 0x0, 0x7dff800}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}], [{}, {}, {}, {}, {}, {0x3}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {0x3}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {0x3}, {0x0, 0x1}, {}, {}, {0x4}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 395.083108ms ago: executing program 2 (id=18664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0xfffffffc, 0x100, 0x0, 0x1dd}, &(0x7f0000000340), &(0x7f0000000300)) 394.283128ms ago: executing program 2 (id=18667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 351.580401ms ago: executing program 4 (id=18668): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r1, &(0x7f0000000940)='R', 0x1, 0x4fed3) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61) 351.063042ms ago: executing program 2 (id=18669): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x100000000) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) 350.835501ms ago: executing program 4 (id=18670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close_range(r0, 0xffffffffffffffff, 0x2) syz_usb_connect$cdc_ncm(0x3, 0x6e, &(0x7f0000000280)=ANY=[], 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x40085507, 0x0) 345.133292ms ago: executing program 2 (id=18671): syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000001500)=ANY=[@ANYBLOB="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", @ANYRES16, @ANYRES32, @ANYRES64, @ANYRESDEC, @ANYRES8], 0x1, 0x11ef, &(0x7f0000001800)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2012024, 0x0) 342.276652ms ago: executing program 1 (id=18672): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000005304000129bd7000bed3df2500000100d7ecab8be5dcc29bb7fd96"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 263.659309ms ago: executing program 1 (id=18673): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000410"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000080)='./file1\x00', 0x630001a3) 263.327709ms ago: executing program 1 (id=18674): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x1de0, &(0x7f0000001040)) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1c, 0x20000048, r2) 263.055399ms ago: executing program 1 (id=18675): io_setup(0x3ff, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) io_submit(r0, 0x2, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r2, &(0x7f0000000100)="47c7641890", 0x5, 0x0, 0x0, 0x2}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x6, 0x129, r1, 0x0, 0x0, 0x7}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 22.425508ms ago: executing program 1 (id=18676): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') close_range(r2, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=18677): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r1, 0x303, 0x0, 0x0, {0x6}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) kernel console output (not intermixed with test programs): mounting unchecked fs, running e2fsck is recommended [ 326.297649][ T2499] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.299525][ T2506] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 326.323495][ T2506] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.13475: iget: bad i_size value: 360287970189639690 [ 326.337791][ T2506] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.13475: Bad quota inode: 15, type: 2 [ 326.349683][ T2506] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 326.383725][T24353] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.408159][T24353] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.416597][T24353] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.425113][T24353] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.470631][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.495671][ T2518] geneve2: entered promiscuous mode [ 326.500919][ T2518] geneve2: entered allmulticast mode [ 326.931561][ T2554] loop0: detected capacity change from 0 to 512 [ 326.940173][ T2554] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 326.948279][ T2554] EXT4-fs (loop0): orphan cleanup on readonly fs [ 326.954815][ T2554] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #15: comm syz.0.13494: iget: bad i_size value: 360287970189639690 [ 326.969193][ T2554] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.13494: Bad quota inode: 15, type: 2 [ 326.980698][ T2554] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 326.997551][ T2554] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 327.005089][ T2554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 327.028598][ T2554] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 327.042609][ T2554] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 327.071526][ T2554] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #15: comm syz.0.13494: iget: bad i_size value: 360287970189639690 [ 327.072198][ T2570] geneve2: entered promiscuous mode [ 327.090700][ T2570] geneve2: entered allmulticast mode [ 327.102134][ T2554] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.13494: Bad quota inode: 15, type: 2 [ 327.115690][ T2554] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 327.131591][ T2574] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 327.142976][ T2574] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 327.158090][ T2574] EXT4-fs error (device loop0): ext4_quota_enable:7124: inode #15: comm syz.0.13494: iget: bad i_size value: 360287970189639690 [ 327.171688][ T2574] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.13494: Bad quota inode: 15, type: 2 [ 327.183290][ T2574] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 327.213375][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.416818][ T29] kauditd_printk_skb: 198 callbacks suppressed [ 327.416832][ T29] audit: type=1326 audit(311.447:35430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2603 comm="syz.1.13512" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f34b670eb69 code=0x0 [ 327.522640][ T2615] geneve2: entered promiscuous mode [ 327.527921][ T2615] geneve2: entered allmulticast mode [ 328.313002][ T2623] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.387024][ T2623] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.441733][ T29] audit: type=1326 audit(312.402:35431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.464795][ T29] audit: type=1326 audit(312.402:35432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.488375][ T29] audit: type=1326 audit(312.402:35433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.511450][ T29] audit: type=1326 audit(312.402:35434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.534444][ T29] audit: type=1326 audit(312.402:35435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.557458][ T29] audit: type=1326 audit(312.402:35436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.580459][ T29] audit: type=1326 audit(312.402:35437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.603739][ T29] audit: type=1326 audit(312.402:35438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.626765][ T29] audit: type=1326 audit(312.402:35439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2643 comm="syz.2.13536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 328.664401][ T2623] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.727158][ T2623] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.809739][T24353] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.821493][T24353] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.836654][T24353] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.845219][T24353] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.894963][ T2664] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 329.236442][ T2690] sd 0:0:1:0: device reset [ 329.507255][ T2745] geneve2: entered promiscuous mode [ 329.512600][ T2745] geneve2: entered allmulticast mode [ 329.598514][ T2753] atomic_op ffff888119380d28 conn xmit_atomic 0000000000000000 [ 330.388119][ T2847] __nla_validate_parse: 6 callbacks suppressed [ 330.388139][ T2847] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13621'. [ 330.512185][ T2864] loop5: detected capacity change from 0 to 512 [ 330.519008][ T2864] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 330.635409][ T2878] loop5: detected capacity change from 0 to 1024 [ 330.679817][ T2878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.755930][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.042545][ T2917] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.13662'. [ 331.066677][ T2923] loop2: detected capacity change from 0 to 512 [ 331.095153][ T2923] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 331.103339][ T2923] EXT4-fs (loop2): orphan cleanup on readonly fs [ 331.131257][ T2923] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #15: comm syz.2.13651: iget: bad i_size value: 360287970189639690 [ 331.155131][ T2923] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.13651: Bad quota inode: 15, type: 2 [ 331.176619][ T2923] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 331.213662][ T2923] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 331.265377][ T2923] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 331.335531][ T2952] loop0: detected capacity change from 0 to 512 [ 331.354044][ T2923] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 331.365030][ T2952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.377872][ T2923] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 331.497210][ T2923] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #15: comm syz.2.13651: iget: bad i_size value: 360287970189639690 [ 331.549032][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.562570][ T2923] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.13651: Bad quota inode: 15, type: 2 [ 331.585879][ T2923] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 331.608387][ T2970] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.13673'. [ 331.652412][ T2959] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 331.689394][ T2959] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 331.733718][ T2959] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #15: comm syz.2.13651: iget: bad i_size value: 360287970189639690 [ 331.735529][ T2989] netlink: 'syz.5.13684': attribute type 1 has an invalid length. [ 331.755001][ T2989] netlink: 199820 bytes leftover after parsing attributes in process `syz.5.13684'. [ 331.789497][ T2959] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.13651: Bad quota inode: 15, type: 2 [ 331.803442][ T2994] loop5: detected capacity change from 0 to 512 [ 331.810842][ T2959] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 331.840589][ T3000] loop0: detected capacity change from 0 to 128 [ 331.861848][ T2994] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.876221][ T3000] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 331.894545][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.924862][T25707] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 332.106208][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.158020][ T3019] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 332.361573][ T3030] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.493595][ T3030] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.558790][ T3030] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.600575][ T3030] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.609164][ T3051] loop2: detected capacity change from 0 to 512 [ 332.659455][ T41] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.674724][ T3051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.675478][T24351] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.722443][T24351] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.738159][T24351] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.770173][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 332.770235][ T29] audit: type=1326 audit(316.454:35881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c8d955b27 code=0x7ffc0000 [ 332.799604][ T29] audit: type=1326 audit(316.454:35882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c8d8fad69 code=0x7ffc0000 [ 332.865498][ T29] audit: type=1326 audit(316.454:35883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 332.888611][ T29] audit: type=1326 audit(316.482:35884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c8d955b27 code=0x7ffc0000 [ 332.911580][ T29] audit: type=1326 audit(316.482:35885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c8d8fad69 code=0x7ffc0000 [ 332.934604][ T29] audit: type=1326 audit(316.482:35886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 332.957661][ T29] audit: type=1326 audit(316.482:35887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c8d955b27 code=0x7ffc0000 [ 332.980616][ T29] audit: type=1326 audit(316.482:35888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3c8d8fad69 code=0x7ffc0000 [ 333.003701][ T29] audit: type=1326 audit(316.482:35889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 333.026855][ T29] audit: type=1326 audit(316.501:35890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3058 comm="syz.0.13713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3c8d955b27 code=0x7ffc0000 [ 333.212977][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.283399][ T3083] netlink: 'syz.4.13723': attribute type 3 has an invalid length. [ 333.292255][ T3085] loop2: detected capacity change from 0 to 128 [ 333.315553][ T3085] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.333363][ T3090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13725'. [ 333.359871][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 333.387387][ T3095] loop5: detected capacity change from 0 to 512 [ 333.402401][ T3095] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 333.429995][ T3095] EXT4-fs (loop5): orphan cleanup on readonly fs [ 333.448867][ T3095] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.13727: iget: bad i_size value: 360287970189639690 [ 333.468049][ T3095] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.13727: Bad quota inode: 15, type: 2 [ 333.488487][ T3095] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 333.505050][ T3095] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 333.505631][ T3106] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13719'. [ 333.520937][ T3106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13719'. [ 333.521326][ T3095] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.574759][ T3095] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 333.587675][ T3095] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 333.650804][ T3095] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.13727: iget: bad i_size value: 360287970189639690 [ 333.687185][ T3095] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.13727: Bad quota inode: 15, type: 2 [ 333.704688][ T3095] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 333.720109][ T3133] IPv6: Can't replace route, no match found [ 333.737861][ T3120] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 333.759428][ T3120] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 333.775460][ T3120] EXT4-fs error (device loop5): ext4_quota_enable:7124: inode #15: comm syz.5.13727: iget: bad i_size value: 360287970189639690 [ 333.789076][ T3120] EXT4-fs error (device loop5): ext4_quota_enable:7127: comm syz.5.13727: Bad quota inode: 15, type: 2 [ 333.800552][ T3120] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 333.842613][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.766959][ T3197] IPv6: Can't replace route, no match found [ 334.856379][ T6555] hid_parser_main: 43 callbacks suppressed [ 334.856396][ T6555] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 334.891738][ T6555] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.002070][ T3209] hid-generic 0000:0000:0000.0009: pid 3209 passed too short report [ 335.152707][ T3250] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13795'. [ 335.294189][ T23] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 335.324476][ T23] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 335.545512][ T3269] hid-generic 0000:0000:0000.000A: pid 3269 passed too short report [ 335.612332][ T3309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13831'. [ 335.703455][ T3322] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 335.753986][ T3319] lo speed is unknown, defaulting to 1000 [ 336.107483][ T3393] loop0: detected capacity change from 0 to 512 [ 336.143333][ T3398] SELinux: failed to load policy [ 336.179878][ T3393] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.280101][ T3413] lo speed is unknown, defaulting to 1000 [ 336.380013][ T3421] netlink: 24 bytes leftover after parsing attributes in process `syz.5.13866'. [ 336.433115][ T3425] vhci_hcd: invalid port number 96 [ 336.438319][ T3425] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 336.524925][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.555992][ T3434] loop2: detected capacity change from 0 to 764 [ 336.577520][ T3434] Symlink component flag not implemented [ 336.583773][ T3434] Symlink component flag not implemented (7) [ 336.644217][ T3448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13869'. [ 336.653253][ T3448] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13869'. [ 336.705245][ T3458] loop2: detected capacity change from 0 to 512 [ 336.737398][ T3456] SELinux: failed to load policy [ 336.758006][ T3458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.782877][ T3468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13889'. [ 336.792035][ T3468] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13889'. [ 336.961528][ T3485] batadv_slave_1: entered promiscuous mode [ 336.967976][ T3484] netlink: 'syz.0.13885': attribute type 6 has an invalid length. [ 336.971434][ T3482] batadv_slave_1: left promiscuous mode [ 337.053534][ T3498] 9pnet_fd: Insufficient options for proto=fd [ 337.079138][ T3501] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13893'. [ 337.144032][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.163817][ T3516] batadv_slave_1: entered promiscuous mode [ 337.171614][ T3514] batadv_slave_1: left promiscuous mode [ 337.186523][ T3522] loop5: detected capacity change from 0 to 512 [ 337.204112][ T3522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.261183][ T3531] gre0: Master is either lo or non-ether device [ 337.440389][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.485196][ T3565] vhci_hcd: invalid port number 96 [ 337.490357][ T3565] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 337.555514][ T3575] loop0: detected capacity change from 0 to 764 [ 337.569449][ T3575] Symlink component flag not implemented [ 337.575198][ T3575] Symlink component flag not implemented (7) [ 337.600658][ T6555] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 337.609019][ T6555] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 337.680121][ T3592] loop0: detected capacity change from 0 to 764 [ 337.692898][ T3592] Symlink component flag not implemented [ 337.699020][ T3592] Symlink component flag not implemented (7) [ 338.383702][ T3611] loop5: detected capacity change from 0 to 512 [ 338.386457][ T3613] loop2: detected capacity change from 0 to 764 [ 338.397002][ T3611] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -13 [ 338.413269][ T3611] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #13: comm syz.5.13942: iget: bad i_size value: 12154757448730 [ 338.428072][ T3613] Symlink component flag not implemented [ 338.433865][ T3613] Symlink component flag not implemented (7) [ 338.438565][ T3611] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.13942: couldn't read orphan inode 13 (err -117) [ 338.468814][ T3611] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.503119][ T29] kauditd_printk_skb: 278 callbacks suppressed [ 338.503132][ T29] audit: type=1400 audit(321.814:36169): avc: denied { relabelto } for pid=3609 comm="syz.5.13942" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 338.503870][ T3611] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 338.577678][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.682487][ T3637] loop5: detected capacity change from 0 to 512 [ 338.706473][ T29] audit: type=1400 audit(322.001:36170): avc: denied { append } for pid=3638 comm="syz.0.13955" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 338.752019][ T3637] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 338.762565][ T3637] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 338.772789][ T3637] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.13953: Failed to acquire dquot type 1 [ 338.797401][ T3637] EXT4-fs (loop5): 1 truncate cleaned up [ 338.803544][ T3637] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 338.842527][ T3649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13960'. [ 338.856783][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.150708][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13988'. [ 339.159737][ T3712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13988'. [ 339.206828][ T3719] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.267613][ T29] audit: type=1326 audit(322.525:36171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 339.291186][ T29] audit: type=1326 audit(322.553:36172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 339.314344][ T29] audit: type=1326 audit(322.553:36173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 339.337492][ T29] audit: type=1326 audit(322.553:36174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 339.368411][ T3719] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.389610][ T3732] netlink: 'syz.2.13999': attribute type 1 has an invalid length. [ 339.398177][ T3732] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.13999'. [ 339.417614][ T29] audit: type=1326 audit(322.619:36175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 339.440864][ T29] audit: type=1326 audit(322.619:36176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3727 comm="syz.1.13997" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 339.497706][ T3719] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.532335][ T3738] hub 9-0:1.0: USB hub found [ 339.537373][ T3738] hub 9-0:1.0: 8 ports detected [ 339.559195][ T3719] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.663419][T24404] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.672020][T24404] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.684473][T24404] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.693540][T24404] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.774718][ T3758] openvswitch: netlink: Message has 6 unknown bytes. [ 339.830466][ T3769] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 339.887981][ T3779] loop0: detected capacity change from 0 to 1024 [ 339.906560][ T3779] EXT4-fs: Ignoring removed bh option [ 339.913426][ T3784] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.924710][ T3779] EXT4-fs: inline encryption not supported [ 339.933690][ T3779] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 339.947670][ T3779] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 339.957101][ T3779] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.14022: lblock 2 mapped to illegal pblock 2 (length 1) [ 339.964679][ T3789] loop5: detected capacity change from 0 to 2048 [ 339.978210][ T3779] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.14022: lblock 0 mapped to illegal pblock 48 (length 1) [ 339.993241][ T3779] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.14022: Failed to acquire dquot type 0 [ 340.005737][ T3784] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.015706][ T3779] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 340.018694][ T3789] loop5: p1 < > p4 [ 340.026928][ T3779] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.14022: mark_inode_dirty error [ 340.040803][ T3779] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 340.040848][ T3789] loop5: p4 size 8388608 extends beyond EOD, truncated [ 340.051640][ T3779] EXT4-fs (loop0): 1 orphan inode deleted [ 340.065730][ T3779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.078446][ T41] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 340.094192][ T41] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:2: Failed to release dquot type 0 [ 340.106721][ T3784] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.125101][ T3779] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.14022: lblock 0 mapped to illegal pblock 48 (length 1) [ 340.145990][ T3794] loop5: detected capacity change from 0 to 2048 [ 340.154022][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.169302][ T3784] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 340.181419][ T3794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.209581][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.229373][ T3803] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 340.329094][ T3812] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 340.389007][ T3834] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15) [ 340.399057][ T3836] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 340.644866][ T3839] loop0: detected capacity change from 0 to 2048 [ 340.670970][ T3839] loop0: p1 < > p4 [ 340.675577][ T3839] loop0: p4 size 8388608 extends beyond EOD, truncated [ 340.686419][ T3849] loop2: detected capacity change from 0 to 764 [ 340.717758][ T3854] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.768293][ T3854] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.810068][ T3867] openvswitch: netlink: Message has 6 unknown bytes. [ 340.821255][ T3854] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.864680][ T3854] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.954113][T24351] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.966077][T24351] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.977515][T24351] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 340.988716][T24351] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.214849][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 341.354497][ T3895] loop0: detected capacity change from 0 to 2048 [ 341.388190][ T3895] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.421150][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.445901][ T3908] loop0: detected capacity change from 0 to 1024 [ 341.452875][ T3908] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 341.463902][ T3908] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 341.474340][ T3908] JBD2: no valid journal superblock found [ 341.480194][ T3908] EXT4-fs (loop0): Could not load journal inode [ 341.540518][T24351] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.551367][T24389] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.562610][T24351] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.573462][T24351] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.777237][ T3937] loop5: detected capacity change from 0 to 512 [ 341.804164][ T3937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 341.812282][ T3937] System zones: 1-12 [ 341.818239][ T3937] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.14100: error while reading EA inode 32 err=-116 [ 341.831402][ T3937] EXT4-fs (loop5): Remounting filesystem read-only [ 341.837981][ T3937] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 341.849805][ T3937] EXT4-fs (loop5): 1 orphan inode deleted [ 341.855986][ T3937] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.889845][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.973718][ T3943] loop5: detected capacity change from 0 to 1024 [ 341.975653][ T3944] loop2: detected capacity change from 0 to 2048 [ 341.982492][ T3943] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 341.997571][ T3943] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 342.008863][ T3943] JBD2: no valid journal superblock found [ 342.014642][ T3943] EXT4-fs (loop5): Could not load journal inode [ 342.029221][ T3944] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.036307][ T3943] __nla_validate_parse: 12 callbacks suppressed [ 342.036394][ T3943] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14089'. [ 342.078775][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.172930][ T3969] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 342.326650][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 342.563163][ T3986] loop2: detected capacity change from 0 to 512 [ 342.573976][ T3986] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102] [ 342.582001][ T3986] System zones: 1-12 [ 342.586620][ T3986] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.14121: error while reading EA inode 32 err=-116 [ 342.599555][ T3986] EXT4-fs (loop2): Remounting filesystem read-only [ 342.606205][ T3986] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 342.616610][ T3986] EXT4-fs (loop2): 1 orphan inode deleted [ 342.622733][ T3986] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.648612][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.652921][ T3991] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14109'. [ 343.058941][ T4043] openvswitch: netlink: Message has 6 unknown bytes. [ 343.438543][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 343.855983][ T29] kauditd_printk_skb: 1087 callbacks suppressed [ 343.855997][ T29] audit: type=1326 audit(326.828:37260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 343.885221][ T29] audit: type=1326 audit(326.828:37261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 343.908186][ T29] audit: type=1326 audit(326.828:37262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 343.931212][ T29] audit: type=1326 audit(326.856:37263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 343.954126][ T29] audit: type=1326 audit(326.856:37264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 343.977284][ T29] audit: type=1326 audit(326.856:37265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 344.000287][ T29] audit: type=1326 audit(326.856:37266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 344.023197][ T29] audit: type=1326 audit(326.856:37267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 344.045416][ T4119] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 344.046093][ T29] audit: type=1326 audit(326.856:37268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 344.076177][ T29] audit: type=1326 audit(326.856:37269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.4.14169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 344.522826][ T4134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.14177'. [ 344.550320][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 344.665901][ T4151] openvswitch: netlink: Message has 6 unknown bytes. [ 344.724632][ T4160] openvswitch: netlink: Message has 6 unknown bytes. [ 344.758522][ T4166] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.781016][ T4169] netlink: 24 bytes leftover after parsing attributes in process `syz.5.14193'. [ 345.068993][ T4208] netlink: 36 bytes leftover after parsing attributes in process `syz.4.14214'. [ 345.166901][ T4231] openvswitch: netlink: Message has 6 unknown bytes. [ 345.175476][ T4233] loop7: detected capacity change from 0 to 7 [ 345.340711][ T4252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.14234'. [ 345.353044][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 345.362821][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 345.421689][ T4267] loop5: detected capacity change from 0 to 512 [ 345.463989][ T4267] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.522084][ T4283] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14249'. [ 345.539919][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.570228][ T4290] loop5: detected capacity change from 0 to 512 [ 345.592975][ T4290] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.14252: error while reading EA inode 32 err=-116 [ 345.607636][ T4290] EXT4-fs (loop5): Remounting filesystem read-only [ 345.614338][ T4290] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 345.625460][ T4290] EXT4-fs (loop5): 1 orphan inode deleted [ 345.631667][ T4290] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.644178][ T4290] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.662119][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 345.748152][ T4311] netlink: 48 bytes leftover after parsing attributes in process `syz.2.14258'. [ 345.759253][ T4319] sd 0:0:1:0: device reset [ 345.785480][ T4322] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14276'. [ 345.820121][ T4328] netlink: 36 bytes leftover after parsing attributes in process `syz.5.14268'. [ 346.312513][ T4340] netlink: 'syz.5.14274': attribute type 12 has an invalid length. [ 346.321190][ T4340] netlink: 'syz.5.14274': attribute type 29 has an invalid length. [ 346.681212][ T4423] sd 0:0:1:0: device reset [ 346.734822][ T4432] loop5: detected capacity change from 0 to 164 [ 346.745607][ T4434] loop2: detected capacity change from 0 to 512 [ 346.754610][ T4432] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 346.765275][ T4432] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 346.766153][ T4434] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.780449][ T4432] rock: directory entry would overflow storage [ 346.792168][ T4432] rock: sig=0x4f50, size=4, remaining=3 [ 346.797761][ C1] net_ratelimit: 1 callbacks suppressed [ 346.797780][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 346.810403][ T4432] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 346.818920][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.550151][ T4463] sd 0:0:1:0: device reset [ 347.885773][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 348.416127][ T4480] loop0: detected capacity change from 0 to 512 [ 348.434594][ T4480] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.483294][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.587404][ T4524] __nla_validate_parse: 4 callbacks suppressed [ 348.587462][ T4524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14354'. [ 348.641873][ T4530] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 348.648423][ T4530] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 348.656188][ T4530] vhci_hcd vhci_hcd.0: Device attached [ 348.663247][ T4532] vhci_hcd: connection closed [ 348.663350][T24404] vhci_hcd: stop threads [ 348.672962][T24404] vhci_hcd: release socket [ 348.677411][T24404] vhci_hcd: disconnect device [ 348.732015][ T4542] loop2: detected capacity change from 0 to 128 [ 348.985424][ T4565] 9pnet_fd: Insufficient options for proto=fd [ 348.997594][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 349.211840][ T29] kauditd_printk_skb: 1095 callbacks suppressed [ 349.211857][ T29] audit: type=1326 audit(331.832:38365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 349.241887][ T29] audit: type=1326 audit(331.832:38366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 349.265559][ T29] audit: type=1326 audit(331.832:38367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 349.288569][ T29] audit: type=1326 audit(331.842:38368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 349.312092][ T29] audit: type=1326 audit(331.842:38369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 349.334978][ T29] audit: type=1326 audit(331.842:38370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 349.358884][ T29] audit: type=1326 audit(331.851:38371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 349.381762][ T29] audit: type=1326 audit(331.851:38372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 349.405280][ T29] audit: type=1326 audit(331.851:38373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 349.428805][ T29] audit: type=1326 audit(331.860:38374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4509 comm="syz.4.14348" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 349.484337][ T4597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14390'. [ 349.521281][ T4605] loop5: detected capacity change from 0 to 764 [ 349.539761][ T4605] rock: directory entry would overflow storage [ 349.545971][ T4605] rock: sig=0x4f50, size=4, remaining=3 [ 349.551517][ T4605] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 349.643825][ T4627] program syz.5.14404 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.711967][ T4645] 9pnet: Could not find request transport: f [ 349.742246][ T4653] bridge0: entered promiscuous mode [ 349.750313][ T4653] bridge0: port 3(macsec1) entered blocking state [ 349.756937][ T4653] bridge0: port 3(macsec1) entered disabled state [ 349.763934][ T4653] macsec1: entered allmulticast mode [ 349.769400][ T4653] bridge0: entered allmulticast mode [ 349.778195][ T4653] macsec1: left allmulticast mode [ 349.783338][ T4653] bridge0: left allmulticast mode [ 349.790056][ T4653] bridge0: left promiscuous mode [ 350.109399][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 350.271042][ T4724] loop5: detected capacity change from 0 to 512 [ 350.277691][ T4724] ext4: Unknown parameter 'measure' [ 350.298044][ T4726] openvswitch: netlink: Message has 6 unknown bytes. [ 350.482106][ T4745] sctp: [Deprecated]: syz.5.14459 (pid 4745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.482106][ T4745] Use struct sctp_sack_info instead [ 350.526185][ T4747] loop5: detected capacity change from 0 to 512 [ 350.533237][ T4747] ext4: Unknown parameter 'permit_directio' [ 350.631432][ T4764] sctp: [Deprecated]: syz.5.14463 (pid 4764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 350.631432][ T4764] Use struct sctp_sack_info instead [ 351.068792][ T4784] random: crng reseeded on system resumption [ 351.142186][ T4790] loop2: detected capacity change from 0 to 128 [ 351.221246][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 351.334928][ T4802] loop2: detected capacity change from 0 to 1024 [ 351.353073][ T4802] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.379826][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.566458][ T4829] loop2: detected capacity change from 0 to 128 [ 351.644999][ T4833] loop5: detected capacity change from 0 to 8192 [ 351.676305][ T4839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14503'. [ 351.689471][ T4839] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14503'. [ 351.866639][ T4854] lo speed is unknown, defaulting to 1000 [ 351.866639][ T4858] can0: slcan on ptm0. [ 351.916298][ T4857] can0 (unregistered): slcan off ptm0. [ 352.333082][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 352.893174][ T4972] loop5: detected capacity change from 0 to 512 [ 352.927950][ T4972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 352.955584][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 353.022891][ T4998] netlink: 64 bytes leftover after parsing attributes in process `syz.2.14578'. [ 353.090497][ T5006] program syz.5.14581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 353.115262][ T5010] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14583'. [ 353.240044][ T5034] loop2: detected capacity change from 0 to 1024 [ 353.245288][ T5036] netlink: 'syz.0.14595': attribute type 27 has an invalid length. [ 353.247676][ T5034] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 353.265836][ T5034] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 353.286544][ T5034] JBD2: no valid journal superblock found [ 353.292474][ T5034] EXT4-fs (loop2): Could not load journal inode [ 353.304398][ T5034] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 353.383888][ T5036] veth2: left allmulticast mode [ 353.389011][ T6680] lo speed is unknown, defaulting to 1000 [ 353.394862][ T6680] syz2: Port: 1 Link DOWN [ 353.402763][T24378] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.411146][T24378] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.423862][T24378] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.432551][T24378] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.442894][ T6680] kernel write not supported for file /sg0 (pid: 6680 comm: kworker/1:12) [ 353.451535][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 353.568026][ T5064] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14607'. [ 353.988211][ T5112] loop2: detected capacity change from 0 to 1024 [ 354.011872][ T5118] program syz.5.14631 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.033439][ T5112] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 354.155062][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 354.375814][ T5137] lo speed is unknown, defaulting to 1000 [ 354.520351][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14642'. [ 354.529760][ T5145] netlink: 312 bytes leftover after parsing attributes in process `syz.5.14642'. [ 354.539590][ T5145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14642'. [ 354.556708][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 354.568579][ T29] kauditd_printk_skb: 1333 callbacks suppressed [ 354.568602][ T29] audit: type=1326 audit(336.846:39708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 354.598039][ T29] audit: type=1326 audit(336.846:39709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 354.621065][ T29] audit: type=1326 audit(336.846:39710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 354.653132][ T29] audit: type=1326 audit(336.846:39711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 354.676132][ T29] audit: type=1326 audit(336.846:39712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 354.699131][ T29] audit: type=1326 audit(336.846:39713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 354.726992][ T29] audit: type=1326 audit(336.949:39714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 354.749962][ T29] audit: type=1326 audit(336.949:39715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd2ae16ad69 code=0x7ffc0000 [ 354.772944][ T29] audit: type=1326 audit(336.949:39716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 354.796347][ T29] audit: type=1326 audit(336.968:39717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5123 comm="syz.4.14632" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd2ae1c5b27 code=0x7ffc0000 [ 354.862581][ T5164] loop5: detected capacity change from 0 to 512 [ 354.970775][ T5183] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14659'. [ 355.487721][ T5266] loop5: detected capacity change from 0 to 2048 [ 355.519370][ T5266] loop5: p1 < > p4 [ 355.523689][ T5266] loop5: p4 size 8388608 extends beyond EOD, truncated [ 355.668534][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 355.734889][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14708'. [ 355.743953][ T5290] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14708'. [ 355.825000][ T5306] loop5: detected capacity change from 0 to 1024 [ 355.832221][ T5306] EXT4-fs: Ignoring removed orlov option [ 355.837935][ T5306] EXT4-fs: Ignoring removed nomblk_io_submit option [ 355.852326][ T5306] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 355.875924][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.536441][ T5407] lo speed is unknown, defaulting to 1000 [ 356.628180][ T5421] 9pnet: Could not find request transport: f [ 356.636194][ T5407] geneve0: entered promiscuous mode [ 356.642127][ T5407] geneve0: entered allmulticast mode [ 356.761280][ T5439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14777'. [ 356.780347][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 356.799100][ T5445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14780'. [ 356.811148][ T5445] gtp0: entered promiscuous mode [ 356.816286][ T5445] gtp0: entered allmulticast mode [ 356.879737][ T5461] sctp: [Deprecated]: syz.0.14788 (pid 5461) Use of int in maxseg socket option. [ 356.879737][ T5461] Use struct sctp_assoc_value instead [ 356.917756][ T5467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5467 comm=syz.4.14790 [ 356.930671][ T5467] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5467 comm=syz.4.14790 [ 356.970192][ T5471] netlink: 16 bytes leftover after parsing attributes in process `syz.4.14793'. [ 357.022823][ T5481] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 357.133578][ T5501] loop5: detected capacity change from 0 to 1764 [ 357.234490][ T5531] netlink: 'wޣ': attribute type 6 has an invalid length. [ 357.280164][ T5537] pim6reg: entered allmulticast mode [ 357.302375][ T5537] pim6reg: left allmulticast mode [ 357.496064][ T5576] atomic_op ffff88810f456d28 conn xmit_atomic 0000000000000000 [ 357.551577][ T5582] netlink: 116 bytes leftover after parsing attributes in process `syz.4.14847'. [ 357.761144][ T5615] rdma_op ffff88810f456580 conn xmit_rdma 0000000000000000 [ 357.892192][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 357.965172][ T5654] netlink: '+}[@': attribute type 13 has an invalid length. [ 358.004549][ T5654] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 358.020186][ T5650] lo speed is unknown, defaulting to 1000 [ 358.083951][ T5669] loop5: detected capacity change from 0 to 512 [ 358.104291][ T5669] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 358.157503][ T5673] lo speed is unknown, defaulting to 1000 [ 358.236965][ T5692] vhci_hcd: invalid port number 96 [ 358.242137][ T5692] vhci_hcd: default hub control req: 0300 vfffc i0060 l0 [ 358.403999][T24364] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 358.482438][ T5729] netlink: 'syz.5.14917': attribute type 1 has an invalid length. [ 358.549835][ T5749] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 358.592565][ T5757] 9pnet_fd: Insufficient options for proto=fd [ 358.690093][ T5781] loop2: detected capacity change from 0 to 256 [ 358.889702][ T5824] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 359.004017][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 359.040817][ T5841] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 359.040920][ T6680] IPVS: starting estimator thread 0... [ 359.143153][ T5851] IPVS: using max 2880 ests per chain, 144000 per kthread [ 359.162877][ T5858] dummy0: entered promiscuous mode [ 359.169636][ T5858] dummy0: left promiscuous mode [ 359.254387][ T5874] bond0: left allmulticast mode [ 359.258387][ T5877] loop5: detected capacity change from 0 to 128 [ 359.259300][ T5874] syz_tun: left allmulticast mode [ 359.273831][ T5877] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.292226][ T5874] team0 (unregistering): Port device bond0 removed [ 359.300361][ T5874] hsr_slave_0: left allmulticast mode [ 359.307481][ T5874] team0 (unregistering): Port device hsr_slave_0 removed [ 359.307823][T32392] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 359.514859][ T5899] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.522109][ T5899] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.643889][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.657997][ T5899] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.734612][T24364] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.777463][T24369] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.804214][T24369] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.862037][T24369] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.877266][ T5946] loop2: detected capacity change from 0 to 2048 [ 359.925470][ T5946] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 359.943118][ T5946] EXT4-fs (loop2): shut down requested (2) [ 359.970797][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.057843][ T5989] loop2: detected capacity change from 0 to 1024 [ 360.065391][ T5989] EXT4-fs: Ignoring removed orlov option [ 360.085081][ T5989] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.115833][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 360.141615][ T6004] __nla_validate_parse: 3 callbacks suppressed [ 360.141632][ T6004] netlink: 48 bytes leftover after parsing attributes in process `syz.1.15037'. [ 360.167482][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.196311][ T29] kauditd_printk_skb: 869 callbacks suppressed [ 360.196392][ T29] audit: type=1326 audit(342.103:40587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.0.15042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 360.230685][ T29] audit: type=1326 audit(342.140:40588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.0.15042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=63 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 360.253917][ T29] audit: type=1326 audit(342.140:40589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.0.15042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 360.276944][ T29] audit: type=1326 audit(342.140:40590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6011 comm="syz.0.15042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 360.377946][ T29] audit: type=1400 audit(342.271:40591): avc: denied { write } for pid=6043 comm="syz.1.15056" name="file0" dev="tmpfs" ino=16211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.400183][ T29] audit: type=1400 audit(342.271:40592): avc: denied { open } for pid=6043 comm="syz.1.15056" path="/3169/file0" dev="tmpfs" ino=16211 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.423734][ T29] audit: type=1400 audit(342.271:40593): avc: denied { ioctl } for pid=6043 comm="syz.1.15056" path="/3169/file0" dev="tmpfs" ino=16211 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 360.464587][ T29] audit: type=1400 audit(342.356:40594): avc: denied { name_bind } for pid=6046 comm="syz.4.15057" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 360.615059][ T29] audit: type=1326 audit(342.487:40595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.0.15070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 360.638955][ T29] audit: type=1326 audit(342.487:40596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6073 comm="syz.0.15070" exe="/root/syz-executor" sig=0 arch=c000003e syscall=194 compat=0 ip=0x7f3c8d95eb69 code=0x7ffc0000 [ 360.717858][ T6096] netlink: 268 bytes leftover after parsing attributes in process `syz.0.15081'. [ 360.872428][ T6114] loop5: detected capacity change from 0 to 1024 [ 360.887239][ T6113] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 360.887239][ T6113] program syz.2.15088 not setting count and/or reply_len properly [ 360.919513][ T6114] ext4: Unknown parameter 'func' [ 360.965647][ T6114] loop5: detected capacity change from 0 to 512 [ 360.985756][ T6114] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.15089: bad orphan inode 15 [ 360.996287][ T6114] ext4_test_bit(bit=14, block=5) = 0 [ 361.001923][ T6114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.094567][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.158851][ T6142] IPVS: Error connecting to the multicast addr [ 361.227650][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.155842][ T6236] bond2: entered promiscuous mode [ 362.161127][ T6236] bond2: entered allmulticast mode [ 362.166477][ T6236] 8021q: adding VLAN 0 to HW filter on device bond2 [ 362.182979][ T6236] bond2 (unregistering): Released all slaves [ 362.193652][ T6239] batadv_slave_1: entered promiscuous mode [ 362.199713][ T6239] batadv_slave_1: left promiscuous mode [ 362.339462][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 362.467789][ T6287] batadv_slave_1: entered promiscuous mode [ 362.475764][ T6286] batadv_slave_1: left promiscuous mode [ 362.776255][ T6340] loop2: detected capacity change from 0 to 256 [ 362.818101][ T6348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15193'. [ 363.152955][ T6409] loop5: detected capacity change from 0 to 764 [ 363.153288][ T6414] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 363.170602][ T6411] loop0: detected capacity change from 0 to 1024 [ 363.181146][ T6409] rock: directory entry would overflow storage [ 363.184056][ T6414] vhci_hcd: default hub control req: 2314 v0008 i0002 l0 [ 363.188055][ T6409] rock: sig=0x4654, size=5, remaining=4 [ 363.207755][ T6411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.222312][ T6411] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.293715][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15231'. [ 363.326110][ T6435] netlink: 56 bytes leftover after parsing attributes in process `wޣ'. [ 363.355129][ T6435] IPVS: stopping backup sync thread 3836 ... [ 363.386558][ T6443] loop0: detected capacity change from 0 to 512 [ 363.414623][ T6443] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.15237: iget: bad i_size value: 38620345925642 [ 363.433415][ T6443] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.15237: couldn't read orphan inode 15 (err -117) [ 363.447381][ T6443] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.451327][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 363.494508][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.585618][ T6469] loop0: detected capacity change from 0 to 512 [ 363.602615][ T6469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 363.618377][ T6469] netlink: 32 bytes leftover after parsing attributes in process `syz.0.15248'. [ 363.637843][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 363.687260][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15251'. [ 363.814386][ T6509] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 363.884671][ T6507] lo speed is unknown, defaulting to 1000 [ 364.563112][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 364.583496][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15324'. [ 364.592721][ T6649] netlink: 28 bytes leftover after parsing attributes in process `syz.2.15324'. [ 364.602465][ T6649] netlink: 12 bytes leftover after parsing attributes in process `syz.2.15324'. [ 364.616058][ T6649] netlink: 'syz.2.15324': attribute type 6 has an invalid length. [ 365.172334][ T6781] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 365.178875][ T6781] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 365.187304][ T6781] vhci_hcd vhci_hcd.0: Device attached [ 365.215266][ T6784] vhci_hcd: connection closed [ 365.217961][T24369] vhci_hcd: stop threads [ 365.226984][T24369] vhci_hcd: release socket [ 365.231448][T24369] vhci_hcd: disconnect device [ 365.573501][ T29] kauditd_printk_skb: 747 callbacks suppressed [ 365.573515][ T29] audit: type=1326 audit(347.136:41344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 365.614685][ T29] audit: type=1400 audit(347.136:41345): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 365.637549][ T29] audit: type=1400 audit(347.136:41346): avc: denied { map_create } for pid=6874 comm="syz.0.15431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 365.656493][ T29] audit: type=1400 audit(347.136:41347): avc: denied { prog_load } for pid=6874 comm="syz.0.15431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 365.675146][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 365.682044][ T29] audit: type=1400 audit(347.145:41348): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 365.705105][ T29] audit: type=1400 audit(347.145:41349): avc: denied { prog_load } for pid=6876 comm="syz.0.15432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 365.723837][ T29] audit: type=1400 audit(347.145:41350): avc: denied { create } for pid=6876 comm="syz.0.15432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 365.744195][ T29] audit: type=1400 audit(347.145:41351): avc: denied { create } for pid=6876 comm="syz.0.15432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 365.764280][ T29] audit: type=1400 audit(347.145:41352): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 365.787283][ T29] audit: type=1326 audit(347.164:41353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6872 comm="syz.1.15430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34b670eb69 code=0x7ffc0000 [ 366.328914][ T6959] sctp: [Deprecated]: syz.0.15472 (pid 6959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 366.328914][ T6959] Use struct sctp_sack_info instead [ 366.786754][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 366.987456][ T7069] lo speed is unknown, defaulting to 1000 [ 367.898585][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 368.545248][ T7216] __nla_validate_parse: 1 callbacks suppressed [ 368.545265][ T7216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.15598'. [ 368.686880][ T7244] netlink: 'syz.2.15612': attribute type 27 has an invalid length. [ 368.704379][ T7244] lo: left allmulticast mode [ 368.714348][ T7244] tunl0: left allmulticast mode [ 368.725592][ T7244] gre0: left allmulticast mode [ 368.743045][ T7244] gretap0: left allmulticast mode [ 368.756197][ T7244] erspan0: left allmulticast mode [ 368.768780][ T7244] ip_vti0: left allmulticast mode [ 368.787098][ T7244] ip6_vti0: left allmulticast mode [ 368.793045][ T7244] sit0: left allmulticast mode [ 368.818349][ T7244] ip6tnl0: left allmulticast mode [ 368.838160][ T7244] ip6gre0: left allmulticast mode [ 368.861351][ T7244] ip6gretap0: left allmulticast mode [ 368.872774][ T7244] vcan0: left allmulticast mode [ 368.905263][ T7244] team0: left allmulticast mode [ 368.910169][ T7244] bond0: left allmulticast mode [ 368.915745][ T7244] syz_tun: left allmulticast mode [ 368.939561][ T7244] nlmon0: left allmulticast mode [ 368.963432][ T7244] caif0: left allmulticast mode [ 368.969185][ T7244] bridge_slave_1: left allmulticast mode [ 368.976879][ T7244] veth3: left promiscuous mode [ 369.010419][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 369.533357][ T7326] lo speed is unknown, defaulting to 1000 [ 370.122253][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.244761][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 371.441775][ T29] kauditd_printk_skb: 776 callbacks suppressed [ 371.441814][ T29] audit: type=1400 audit(352.626:42130): avc: denied { read } for pid=7439 comm="syz.0.15713" dev="nsfs" ino=4026532375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 371.469530][ T29] audit: type=1400 audit(352.626:42131): avc: denied { prog_load } for pid=7436 comm="syz.1.15703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.491216][ T29] audit: type=1400 audit(352.626:42132): avc: denied { prog_load } for pid=7438 comm="syz.2.15704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.510489][ T29] audit: type=1400 audit(352.626:42133): avc: denied { map_create } for pid=7437 comm="syz.4.15715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.529253][ T29] audit: type=1400 audit(352.626:42134): avc: denied { prog_load } for pid=7437 comm="syz.4.15715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.548673][ T29] audit: type=1400 audit(352.626:42135): avc: denied { create } for pid=7437 comm="syz.4.15715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 371.567890][ T29] audit: type=1400 audit(352.654:42136): avc: denied { create } for pid=7436 comm="syz.1.15703" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=0 [ 371.587530][ T29] audit: type=1400 audit(352.664:42137): avc: denied { prog_load } for pid=7439 comm="syz.0.15713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 371.606188][ T29] audit: type=1400 audit(352.664:42138): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 371.650169][ T29] audit: type=1400 audit(352.701:42139): avc: denied { map_create } for pid=7445 comm="syz.4.15717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 372.356605][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.015974][ T7623] lo speed is unknown, defaulting to 1000 [ 373.146782][ T7623] geneve0: entered promiscuous mode [ 373.152090][ T7623] geneve0: entered allmulticast mode [ 373.468388][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 373.514531][ T7635] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7635 comm=syz.0.15807 [ 373.527463][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15796'. [ 373.540434][ T7636] gtp1: entered promiscuous mode [ 373.545471][ T7636] gtp1: entered allmulticast mode [ 373.689356][ T7670] netlink: 16 bytes leftover after parsing attributes in process `syz.5.15812'. [ 373.919195][ T7731] netlink: 'wޣ': attribute type 6 has an invalid length. [ 374.039532][ T7761] netlink: 116 bytes leftover after parsing attributes in process `syz.2.15860'. [ 374.569532][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 374.708182][ T7816] netlink: '+}[@': attribute type 13 has an invalid length. [ 374.748801][ T7816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.758322][ T7816] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.783187][ T7816] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 374.881507][ T7842] lo speed is unknown, defaulting to 1000 [ 375.531382][ T8010] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.553954][ T8015] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15984'. [ 375.681404][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 375.800748][ T8042] dummy0: entered promiscuous mode [ 375.806768][ T8042] debugfs: 'hsr0' already exists in 'hsr' [ 375.812744][ T8042] Cannot create hsr debugfs directory [ 375.818336][ T8042] hsr0: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 375.838987][ T8042] hsr0: entered allmulticast mode [ 375.844801][ T8042] dummy0: entered allmulticast mode [ 375.850017][ T8042] bond0: entered allmulticast mode [ 375.855162][ T8042] syz_tun: entered allmulticast mode [ 376.046111][ T8059] team0 (unregistering): Port device bond0 removed [ 376.793236][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 376.811885][ T29] kauditd_printk_skb: 1097 callbacks suppressed [ 376.811900][ T29] audit: type=1400 audit(357.640:43237): avc: denied { prog_load } for pid=8225 comm="syz.0.16094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 376.853340][ T29] audit: type=1400 audit(357.677:43238): avc: denied { map_create } for pid=8231 comm="syz.1.16095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 376.872826][ T29] audit: type=1400 audit(357.677:43239): avc: denied { read write } for pid=8229 comm="syz.2.16085" name="loop2" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 376.895610][ T29] audit: type=1400 audit(357.677:43240): avc: denied { prog_load } for pid=8231 comm="syz.1.16095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 376.915568][ T29] audit: type=1400 audit(357.677:43241): avc: denied { prog_load } for pid=8231 comm="syz.1.16095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 376.934209][ T29] audit: type=1400 audit(357.687:43242): avc: denied { map_create } for pid=8229 comm="syz.2.16085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 376.966447][ T29] audit: type=1400 audit(357.696:43243): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 376.989230][ T29] audit: type=1400 audit(357.706:43244): avc: denied { map_create } for pid=8233 comm="syz.1.16087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 377.008216][ T29] audit: type=1400 audit(357.706:43245): avc: denied { prog_load } for pid=8233 comm="syz.1.16087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 377.027102][ T29] audit: type=1400 audit(357.724:43246): avc: denied { prog_load } for pid=8236 comm="syz.1.16089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 377.905023][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 378.080945][ T8389] bond2: entered promiscuous mode [ 378.086139][ T8389] bond2: entered allmulticast mode [ 378.091653][ T8389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 378.100489][ T8389] bond2 (unregistering): Released all slaves [ 379.016825][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 379.127248][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16209'. [ 379.822349][ T8626] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 379.828901][ T8626] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 379.836744][ T8626] vhci_hcd vhci_hcd.0: Device attached [ 379.869800][ T8628] vhci_hcd: connection closed [ 379.869982][T24369] vhci_hcd: stop threads [ 379.879131][T24369] vhci_hcd: release socket [ 379.883713][T24369] vhci_hcd: disconnect device [ 380.128642][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.201813][ T8686] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 381.119152][ T8817] bridge0: port 1(macsec1) entered blocking state [ 381.125754][ T8817] bridge0: port 1(macsec1) entered disabled state [ 381.139344][ T8817] macsec1: entered allmulticast mode [ 381.145604][ T8817] bridge0: entered allmulticast mode [ 381.152203][ T8817] macsec1: left allmulticast mode [ 381.157343][ T8817] bridge0: left allmulticast mode [ 381.240499][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 381.715024][ T8856] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 381.722254][ T8856] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 381.730100][ T8856] vhci_hcd vhci_hcd.0: Device attached [ 381.754750][ T8858] vhci_hcd: connection closed [ 381.754905][T24378] vhci_hcd: stop threads [ 381.763862][T24378] vhci_hcd: release socket [ 381.768336][T24378] vhci_hcd: disconnect device [ 382.301239][ T29] kauditd_printk_skb: 1067 callbacks suppressed [ 382.301256][ T29] audit: type=1400 audit(362.775:44314): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 382.351361][ T29] audit: type=1400 audit(362.785:44315): avc: denied { prog_load } for pid=8921 comm="syz.5.16414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.370038][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 382.377055][ T29] audit: type=1400 audit(362.785:44316): avc: denied { create } for pid=8921 comm="syz.5.16414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 382.396311][ T29] audit: type=1400 audit(362.785:44317): avc: denied { read write } for pid=32392 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 382.420358][ T29] audit: type=1400 audit(362.813:44318): avc: denied { open } for pid=8925 comm="syz.0.16410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 382.439434][ T29] audit: type=1400 audit(362.813:44319): avc: denied { prog_load } for pid=8925 comm="syz.0.16410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.458195][ T29] audit: type=1400 audit(362.813:44320): avc: denied { map_create } for pid=8922 comm="syz.2.16413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.477182][ T29] audit: type=1400 audit(362.813:44321): avc: denied { prog_load } for pid=8922 comm="syz.2.16413" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 382.495781][ T29] audit: type=1400 audit(362.822:44322): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 382.518672][ T29] audit: type=1400 audit(362.822:44323): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 383.053570][ T9070] sctp: [Deprecated]: syz.2.16486 (pid 9070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.053570][ T9070] Use struct sctp_sack_info instead [ 383.112617][ T9083] sctp: [Deprecated]: syz.1.16505 (pid 9083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.112617][ T9083] Use struct sctp_sack_info instead [ 383.263678][ T9121] sctp: [Deprecated]: syz.4.16511 (pid 9121) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.263678][ T9121] Use struct sctp_sack_info instead [ 383.331865][ T9130] sctp: [Deprecated]: syz.4.16526 (pid 9130) Use of struct sctp_assoc_value in delayed_ack socket option. [ 383.331865][ T9130] Use struct sctp_sack_info instead [ 383.474815][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 384.575937][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 385.687765][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 386.799587][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.657464][ T29] kauditd_printk_skb: 727 callbacks suppressed [ 387.657480][ T29] audit: type=1400 audit(367.799:45051): avc: denied { execute } for pid=9414 comm="syz.0.16654" path="/1337/cpu.stat" dev="tmpfs" ino=6866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=0 [ 387.752203][ T29] audit: type=1400 audit(367.808:45052): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 387.775058][ T29] audit: type=1400 audit(367.836:45053): avc: denied { read write } for pid=32392 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 387.798915][ T29] audit: type=1400 audit(367.855:45054): avc: denied { map_create } for pid=9417 comm="syz.4.16656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.817755][ T29] audit: type=1400 audit(367.855:45055): avc: denied { prog_load } for pid=9417 comm="syz.4.16656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.836421][ T29] audit: type=1400 audit(367.855:45056): avc: denied { prog_load } for pid=9417 comm="syz.4.16656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.855196][ T29] audit: type=1400 audit(367.855:45057): avc: denied { map_create } for pid=9417 comm="syz.4.16656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.873933][ T29] audit: type=1400 audit(367.855:45058): avc: denied { map_create } for pid=9416 comm="syz.5.16657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.892866][ T29] audit: type=1400 audit(367.855:45059): avc: denied { prog_load } for pid=9422 comm="syz.1.16670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 387.911592][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 387.918469][ T29] audit: type=1400 audit(367.873:45060): avc: denied { read write } for pid=32392 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 389.023223][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.121298][ T9469] can0: slcan on ptm1. [ 390.135047][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 390.142254][ T9464] lo speed is unknown, defaulting to 1000 [ 390.188594][ T9468] can0 (unregistered): slcan off ptm1. [ 391.257586][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.397345][ T9541] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9541 comm=syz.5.16719 [ 391.408958][ T6589] IPVS: starting estimator thread 0... [ 391.415766][ T9529] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 391.535534][ T9545] IPVS: using max 2688 ests per chain, 134400 per kthread [ 391.827664][ T9632] netlink: 'syz.5.16765': attribute type 10 has an invalid length. [ 391.847448][ T9632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.852459][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16770'. [ 391.869412][ T9632] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 391.890333][ T9645] bond2: entered promiscuous mode [ 391.895400][ T9645] bond2: entered allmulticast mode [ 391.900830][ T9645] 8021q: adding VLAN 0 to HW filter on device bond2 [ 391.909462][ T9648] bond0: entered promiscuous mode [ 391.914574][ T9648] bond_slave_0: entered promiscuous mode [ 391.920304][ T9648] bond_slave_1: entered promiscuous mode [ 391.926713][ T9648] batadv0: entered promiscuous mode [ 391.990878][ T9670] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 392.055957][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16787'. [ 392.066602][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16787'. [ 392.127955][ T9701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.141669][ T9701] bond0: (slave bond1): Enslaving as an active interface with an up link [ 392.150380][ T9700] pim6reg1: entered promiscuous mode [ 392.155717][ T9700] pim6reg1: entered allmulticast mode [ 392.318038][ T9733] sctp: [Deprecated]: syz.0.16811 (pid 9733) Use of struct sctp_assoc_value in delayed_ack socket option. [ 392.318038][ T9733] Use struct sctp_sack_info instead [ 392.358725][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 392.373524][ T9746] netlink: 188 bytes leftover after parsing attributes in process `syz.5.16817'. [ 392.458069][ T9745] lo speed is unknown, defaulting to 1000 [ 392.564977][ T9780] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9780 comm=syz.0.16833 [ 392.599994][ T9788] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16837'. [ 392.784552][ T9826] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 392.943439][ T9846] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.16858'. [ 392.956578][ T9832] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.16858'. [ 393.012280][ T29] kauditd_printk_skb: 608 callbacks suppressed [ 393.012294][ T29] audit: type=1400 audit(372.803:45669): avc: denied { prog_load } for pid=9856 comm="syz.5.16870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 393.042834][ T9850] lo speed is unknown, defaulting to 1000 [ 393.049860][ T29] audit: type=1400 audit(372.803:45670): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 393.072620][ T29] audit: type=1400 audit(372.803:45671): avc: denied { prog_load } for pid=9858 comm="syz.2.16871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 393.092006][ T29] audit: type=1400 audit(372.803:45672): avc: denied { map_create } for pid=9858 comm="syz.2.16871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 393.110787][ T29] audit: type=1400 audit(372.803:45673): avc: denied { map_create } for pid=9858 comm="syz.2.16871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 393.130264][ T29] audit: type=1400 audit(372.803:45674): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 393.153049][ T29] audit: type=1400 audit(372.803:45675): avc: denied { open } for pid=9860 comm="syz.2.16872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 393.172570][ T29] audit: type=1400 audit(372.803:45676): avc: denied { allowed } for pid=9860 comm="syz.2.16872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 393.191793][ T29] audit: type=1400 audit(372.831:45677): avc: denied { create } for pid=9856 comm="syz.5.16870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 393.231767][ T29] audit: type=1400 audit(372.831:45678): avc: denied { read write } for pid=3307 comm="syz-executor" name="loop2" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 393.276818][ T9878] netlink: 8 bytes leftover after parsing attributes in process `syz.5.16879'. [ 393.470564][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 393.652715][ T9954] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16917'. [ 393.661793][ T9954] netlink: 108 bytes leftover after parsing attributes in process `syz.1.16917'. [ 393.714738][ T9968] netlink: 'syz.5.16924': attribute type 29 has an invalid length. [ 393.724052][ T9968] netlink: 'syz.5.16924': attribute type 29 has an invalid length. [ 393.956876][T10032] netlink: 'syz.2.16956': attribute type 39 has an invalid length. [ 393.981816][T10036] ip6tnl1: entered promiscuous mode [ 393.987120][T10036] ip6tnl1: entered allmulticast mode [ 394.316180][T10119] macvlan2: entered promiscuous mode [ 394.323400][T10119] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 394.546499][T10176] can0: slcan on ptm0. [ 394.593080][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.600392][T10174] can0 (unregistered): slcan off ptm0. [ 395.575224][T10244] lo speed is unknown, defaulting to 1000 [ 395.694191][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 395.838767][T10279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.847130][T10279] bond1: entered promiscuous mode [ 395.852296][T10279] bond1: entered allmulticast mode [ 395.858340][T10279] bond0: (slave bond1): Enslaving as an active interface with an up link [ 396.129176][T10294] lo speed is unknown, defaulting to 1000 [ 396.371822][T10324] netlink: 'syz.5.17094': attribute type 6 has an invalid length. [ 396.378275][T10322] netlink: 'syz.4.17095': attribute type 10 has an invalid length. [ 396.391071][T10322] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.403413][T10322] batadv0: entered promiscuous mode [ 396.408776][T10322] batadv0: entered allmulticast mode [ 396.426545][T10322] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 396.614387][T10352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.622445][T10352] bond1: entered promiscuous mode [ 396.627998][T10352] bond0: (slave bond1): Enslaving as an active interface with an up link [ 396.761409][T10379] netlink: 'syz.4.17118': attribute type 6 has an invalid length. [ 396.806027][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 397.460787][T10490] __nla_validate_parse: 16 callbacks suppressed [ 397.460802][T10490] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17169'. [ 397.917823][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 398.204479][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17199'. [ 398.376973][ T29] kauditd_printk_skb: 932 callbacks suppressed [ 398.376988][ T29] audit: type=1400 audit(377.817:46611): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 398.436450][ T29] audit: type=1400 audit(377.826:46612): avc: denied { map_create } for pid=10584 comm="syz.1.17226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 398.456193][ T29] audit: type=1400 audit(377.826:46613): avc: denied { prog_load } for pid=10584 comm="syz.1.17226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 398.461642][T10597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17215'. [ 398.474922][ T29] audit: type=1400 audit(377.826:46614): avc: denied { prog_load } for pid=10584 comm="syz.1.17226" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 398.474949][ T29] audit: type=1400 audit(377.826:46615): avc: denied { mount } for pid=10586 comm="syz.0.17211" name="/" dev="ramfs" ino=128878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=0 [ 398.474971][ T29] audit: type=1400 audit(377.826:46616): avc: denied { create } for pid=10586 comm="syz.0.17211" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=0 [ 398.474992][ T29] audit: type=1400 audit(377.845:46617): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 398.475064][ T29] audit: type=1400 audit(377.854:46618): avc: denied { map_create } for pid=10589 comm="syz.0.17212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 398.475083][ T29] audit: type=1400 audit(377.854:46619): avc: denied { map_create } for pid=10589 comm="syz.0.17212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 398.607756][ T29] audit: type=1400 audit(377.854:46620): avc: denied { prog_load } for pid=10589 comm="syz.0.17212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 399.029679][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.531396][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17305'. [ 399.571725][T10751] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17305'. [ 399.847214][T10776] netlink: 'syz.2.17304': attribute type 10 has an invalid length. [ 399.861399][T10776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.896168][T10776] batadv0: entered promiscuous mode [ 399.902168][T10776] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 400.081806][T10796] lo speed is unknown, defaulting to 1000 [ 400.141508][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 400.142482][T10788] lo speed is unknown, defaulting to 1000 [ 400.290868][T10820] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17325'. [ 400.364451][T10824] netlink: 'syz.1.17326': attribute type 10 has an invalid length. [ 400.373534][T10824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.382219][T10824] batadv0: entered promiscuous mode [ 400.387614][T10824] batadv0: entered allmulticast mode [ 400.408856][T10824] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 400.500283][T10842] lo speed is unknown, defaulting to 1000 [ 400.666942][T10868] netlink: 'syz.0.17342': attribute type 10 has an invalid length. [ 400.693687][T10868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.705496][T10868] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 400.720815][T10868] bond0: entered promiscuous mode [ 400.725889][T10868] bond1: entered promiscuous mode [ 400.731191][T10868] batadv0: entered promiscuous mode [ 400.784592][T10878] netlink: 'syz.2.17358': attribute type 10 has an invalid length. [ 400.871998][T10891] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17352'. [ 400.931442][T10884] lo speed is unknown, defaulting to 1000 [ 400.943648][T10904] netlink: 'syz.5.17363': attribute type 39 has an invalid length. [ 400.946844][T10899] ip6tnl1: entered promiscuous mode [ 400.957490][T10899] ip6tnl1: entered allmulticast mode [ 401.025469][T10915] netlink: 'syz.1.17367': attribute type 10 has an invalid length. [ 401.059838][T10921] netlink: 72 bytes leftover after parsing attributes in process `syz.0.17370'. [ 401.106928][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17374'. [ 401.177556][T10935] netlink: 'syz.4.17387': attribute type 39 has an invalid length. [ 401.253314][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 401.350827][T10952] ip6tnl1: entered promiscuous mode [ 401.356075][T10952] ip6tnl1: entered allmulticast mode [ 401.449576][T10957] lo speed is unknown, defaulting to 1000 [ 401.460978][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17388'. [ 401.476367][T10964] macvlan2: entered promiscuous mode [ 401.483532][T10964] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 401.549800][T10974] netlink: 'syz.0.17393': attribute type 39 has an invalid length. [ 401.697345][T10993] bond2: entered promiscuous mode [ 401.702448][T10993] bond2: entered allmulticast mode [ 401.710815][T10993] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.725383][T10993] bond2 (unregistering): Released all slaves [ 401.876308][T10996] macvlan0: entered promiscuous mode [ 401.882479][T10996] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 402.030490][T11022] netlink: 'syz.1.17418': attribute type 39 has an invalid length. [ 402.042722][T11020] bond2: entered promiscuous mode [ 402.047795][T11020] bond2: entered allmulticast mode [ 402.053175][T11020] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.062809][T11020] bond2 (unregistering): Released all slaves [ 402.266476][T11032] lo speed is unknown, defaulting to 1000 [ 402.326055][T11050] bond2: entered promiscuous mode [ 402.331210][T11050] bond2: entered allmulticast mode [ 402.336985][T11050] 8021q: adding VLAN 0 to HW filter on device bond2 [ 402.347947][T11050] bond2 (unregistering): Released all slaves [ 402.365123][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 402.516087][T11080] netlink: 'syz.2.17445': attribute type 13 has an invalid length. [ 402.542390][T11080] gretap0: refused to change device tx_queue_len [ 402.549444][T11080] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 403.178194][T24400] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2 [ 403.187955][T24400] ref_tracker: netdev@ffff88811969c550 has 1/1 users at [ 403.187955][T24400] batadv_hard_if_event+0x6c1/0xf10 [ 403.187955][T24400] raw_notifier_call_chain+0x6c/0x1b0 [ 403.187955][T24400] call_netdevice_notifiers_info+0xae/0x100 [ 403.187955][T24400] register_netdevice+0xd48/0xf00 [ 403.187955][T24400] veth_newlink+0x49b/0x770 [ 403.187955][T24400] rtnl_newlink_create+0x1b9/0x620 [ 403.187955][T24400] rtnl_newlink+0xf29/0x12d0 [ 403.187955][T24400] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 403.187955][T24400] netlink_rcv_skb+0x120/0x220 [ 403.187955][T24400] rtnetlink_rcv+0x1c/0x30 [ 403.187955][T24400] netlink_unicast+0x5c0/0x690 [ 403.187955][T24400] netlink_sendmsg+0x58b/0x6b0 [ 403.187955][T24400] __sock_sendmsg+0x145/0x180 [ 403.187955][T24400] __sys_sendto+0x268/0x330 [ 403.187955][T24400] __x64_sys_sendto+0x76/0x90 [ 403.187955][T24400] x64_sys_call+0x2d05/0x2ff0 [ 403.187955][T24400] [ 403.476930][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.561717][T11217] __nla_validate_parse: 1 callbacks suppressed [ 403.561733][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17514'. [ 403.577457][T11217] netlink: 28 bytes leftover after parsing attributes in process `syz.5.17514'. [ 404.380660][ T29] kauditd_printk_skb: 809 callbacks suppressed [ 404.380676][ T29] audit: type=1326 audit(383.438:47430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.410959][ T29] audit: type=1326 audit(383.448:47431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.434171][ T29] audit: type=1400 audit(383.448:47432): avc: denied { map_create } for pid=11240 comm="syz.2.17535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.453000][ T29] audit: type=1326 audit(383.448:47433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.476046][ T29] audit: type=1326 audit(383.448:47434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.499202][ T29] audit: type=1326 audit(383.448:47435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.522602][ T29] audit: type=1400 audit(383.448:47436): avc: denied { prog_load } for pid=11240 comm="syz.2.17535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 404.541772][ T29] audit: type=1326 audit(383.448:47437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.565224][ T29] audit: type=1326 audit(383.448:47438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.588282][ T29] audit: type=1326 audit(383.448:47439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11240 comm="syz.2.17535" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 404.611569][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 405.700581][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.312146][T11451] team0: left promiscuous mode [ 406.325687][T24369] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.339223][T24369] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.354706][T24369] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.363503][T24369] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.468571][T11482] dummy0: entered promiscuous mode [ 406.477767][T11482] dummy0: left promiscuous mode [ 406.535499][T11497] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 406.661471][T11508] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17649'. [ 406.812410][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 406.967476][T11573] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.078617][T11591] lo speed is unknown, defaulting to 1000 [ 407.257698][T11634] netlink: '+}[@': attribute type 13 has an invalid length. [ 407.347162][T11634] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.357343][T11634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 407.536554][T11693] netlink: 116 bytes leftover after parsing attributes in process `syz.5.17737'. [ 407.586421][T11706] netlink: 'wޣ': attribute type 6 has an invalid length. [ 407.709144][T11736] netlink: 16 bytes leftover after parsing attributes in process `syz.2.17761'. [ 407.793662][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17777'. [ 407.805762][T11752] gtp1: entered promiscuous mode [ 407.810881][T11752] gtp1: entered allmulticast mode [ 407.827520][T11756] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11756 comm=syz.2.17769 [ 407.924221][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.989579][T11780] lo speed is unknown, defaulting to 1000 [ 408.097482][T11780] geneve0: entered promiscuous mode [ 408.102759][T11780] geneve0: entered allmulticast mode [ 409.036089][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 409.548280][T12034] netlink: 'syz.5.17912': attribute type 27 has an invalid length. [ 409.624215][T12034] bond0: left promiscuous mode [ 409.629113][T12034] bond_slave_0: left promiscuous mode [ 409.634579][T12034] bond_slave_1: left promiscuous mode [ 409.640099][T12034] batadv0: left promiscuous mode [ 409.645129][T12034] bond1: left promiscuous mode [ 409.657318][T12034] macvlan2: left promiscuous mode [ 409.732222][ T29] kauditd_printk_skb: 1164 callbacks suppressed [ 409.732236][ T29] audit: type=1400 audit(388.443:48604): avc: denied { read write } for pid=32392 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.764774][ T29] audit: type=1400 audit(388.452:48605): avc: denied { mounton } for pid=12043 comm="syz.1.17916" path="/3762" dev="tmpfs" ino=19244 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 409.802010][ T29] audit: type=1400 audit(388.508:48606): avc: denied { prog_load } for pid=12045 comm="syz.5.17918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.826591][ T29] audit: type=1400 audit(388.527:48607): avc: denied { open } for pid=12049 comm="syz.4.17907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 409.845676][ T29] audit: type=1400 audit(388.527:48608): avc: denied { read write } for pid=32392 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 409.883084][ T29] audit: type=1400 audit(388.527:48609): avc: denied { prog_load } for pid=12049 comm="syz.4.17907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.901863][ T29] audit: type=1400 audit(388.574:48610): avc: denied { prog_load } for pid=12051 comm="syz.1.17904" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 409.920703][ T29] audit: type=1400 audit(388.574:48611): avc: denied { allowed } for pid=12052 comm="syz.4.17908" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 409.962974][ T29] audit: type=1400 audit(388.602:48612): avc: denied { read write } for pid=25707 comm="syz-executor" name="loop0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 409.985871][ T29] audit: type=1400 audit(388.611:48613): avc: denied { open } for pid=12059 comm="syz.0.17924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 410.097290][T12085] netlink: 8 bytes leftover after parsing attributes in process `syz.5.17925'. [ 410.147923][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 410.512498][T12176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17967'. [ 410.918040][T12243] netlink: 400 bytes leftover after parsing attributes in process `syz.1.18002'. [ 411.259698][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 411.418938][T12305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18034'. [ 411.486140][T12295] lo speed is unknown, defaulting to 1000 [ 411.628439][T12344] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18051'. [ 412.121753][T12415] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.142963][T12415] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 412.371529][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 412.474874][T12491] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18124'. [ 412.871650][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18141'. [ 413.446418][T12612] loop0: detected capacity change from 0 to 1024 [ 413.481434][T12612] EXT4-fs: Ignoring removed oldalloc option [ 413.487554][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 413.494762][T12612] EXT4-fs: Ignoring removed bh option [ 413.545774][T12612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.616891][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.628877][T12637] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18190'. [ 413.999895][T12699] binfmt_misc: register: failed to install interpreter file ./bus [ 414.027992][T12702] loop0: detected capacity change from 0 to 512 [ 414.062638][T12702] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.18219: casefold flag without casefold feature [ 414.077300][T12702] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.18219: couldn't read orphan inode 15 (err -117) [ 414.092845][T12702] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.120730][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.144537][T12712] netlink: 'syz.4.18224': attribute type 1 has an invalid length. [ 414.284823][T12728] loop0: detected capacity change from 0 to 512 [ 414.305827][T12729] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.18229'. [ 414.339000][T12728] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349) [ 414.350068][T12728] EXT4-fs (loop0): orphan cleanup on readonly fs [ 414.359109][T12728] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:517: comm syz.0.18232: Block bitmap for bg 0 marked uninitialized [ 414.379342][T12728] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 414.389119][T12728] EXT4-fs (loop0): 1 orphan inode deleted [ 414.395504][T12728] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 414.410928][T12728] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 414.438465][T12728] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 414.448054][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.458981][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.481137][T25707] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.583922][T12776] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 414.595156][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.018260][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18293'. [ 415.177640][ T29] kauditd_printk_skb: 831 callbacks suppressed [ 415.177657][ T29] audit: type=1400 audit(393.531:49445): avc: denied { execute } for pid=12881 comm="syz.0.18304" path="/1682/memory.swap.current" dev="tmpfs" ino=8620 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 415.220132][T12884] netlink: 'syz.1.18305': attribute type 1 has an invalid length. [ 415.288455][ T29] audit: type=1400 audit(393.634:49446): avc: denied { compute_member } for pid=12891 comm="syz.5.18309" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 415.362976][ T29] audit: type=1326 audit(393.672:49447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1587d85b27 code=0x7ffc0000 [ 415.386063][ T29] audit: type=1326 audit(393.672:49448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1587d2ad69 code=0x7ffc0000 [ 415.409191][ T29] audit: type=1326 audit(393.672:49449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1587d85b27 code=0x7ffc0000 [ 415.432222][ T29] audit: type=1326 audit(393.672:49450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1587d2ad69 code=0x7ffc0000 [ 415.455181][ T29] audit: type=1326 audit(393.672:49451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1587d8eb69 code=0x7ffc0000 [ 415.478341][ T29] audit: type=1326 audit(393.672:49452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1587d8eb69 code=0x7ffc0000 [ 415.501417][ T29] audit: type=1326 audit(393.681:49453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f1587d8eb69 code=0x7ffc0000 [ 415.524647][ T29] audit: type=1326 audit(393.681:49454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.5.18315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1587d8eb69 code=0x7ffc0000 [ 415.695146][T12943] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 415.706983][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 415.906262][T12971] openvswitch: netlink: Message has 6 unknown bytes. [ 415.936297][T12975] loop2: detected capacity change from 0 to 512 [ 415.954952][T12975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 415.981686][T12975] EXT4-fs (loop2): 1 truncate cleaned up [ 416.007223][T12975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.071950][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.208949][T12990] loop5: detected capacity change from 0 to 164 [ 416.233358][T12990] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 416.254880][T12990] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 416.263684][T12990] Symlink component flag not implemented [ 416.269317][T12990] Symlink component flag not implemented [ 416.277137][T12990] Symlink component flag not implemented (7) [ 416.283149][T12990] Symlink component flag not implemented (116) [ 416.672040][T13033] lo speed is unknown, defaulting to 1000 [ 416.819393][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 417.101175][T13071] lo speed is unknown, defaulting to 1000 [ 417.188215][T13089] lo speed is unknown, defaulting to 1000 [ 417.405460][T13113] netlink: 108 bytes leftover after parsing attributes in process `syz.2.18403'. [ 417.405480][T13113] netlink: 108 bytes leftover after parsing attributes in process `syz.2.18403'. [ 417.405537][T13113] netlink: 108 bytes leftover after parsing attributes in process `syz.2.18403'. [ 417.584233][T13138] program syz.5.18414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 417.600048][T13139] random: crng reseeded on system resumption [ 417.659714][T13149] syzkaller1: entered promiscuous mode [ 417.665278][T13149] syzkaller1: entered allmulticast mode [ 417.735410][T13164] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 417.859675][T13192] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18438'. [ 417.931788][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 417.949413][T13209] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.18441'. [ 417.959858][T13196] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.18441'. [ 418.042931][T13227] loop2: detected capacity change from 0 to 1024 [ 418.056713][T13227] EXT4-fs: Ignoring removed nobh option [ 418.062394][T13227] EXT4-fs: Ignoring removed bh option [ 418.074539][T13227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.107806][T13240] loop5: detected capacity change from 0 to 512 [ 418.115795][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.132471][T13242] vhci_hcd: default hub control req: 0310 v0006 i0003 l0 [ 418.146133][T13240] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.177301][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.240822][T13253] SELinux: failed to load policy [ 418.336371][T13278] 9pnet: Could not find request transport: r [ 418.347595][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.1.18478'. [ 418.450151][T13292] netlink: 'syz.5.18483': attribute type 17 has an invalid length. [ 418.472893][T13297] netlink: 'syz.5.18484': attribute type 3 has an invalid length. [ 418.606580][T13323] can0: slcan on ttyS3. [ 418.669181][T13327] openvswitch: netlink: Message has 6 unknown bytes. [ 418.689030][T13323] can0 (unregistered): slcan off ttyS3. [ 418.761734][T13340] loop7: detected capacity change from 0 to 16384 [ 419.044289][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 419.105926][T13381] loop0: detected capacity change from 0 to 512 [ 419.206474][T13391] loop5: detected capacity change from 0 to 8192 [ 419.299300][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18534'. [ 419.308566][T13405] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18534'. [ 419.398850][T13416] wg2: entered promiscuous mode [ 419.403843][T13416] wg2: entered allmulticast mode [ 419.422290][T13420] loop2: detected capacity change from 0 to 1024 [ 419.432967][T13420] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 419.443962][T13420] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 419.454414][T13420] JBD2: no valid journal superblock found [ 419.460151][T13420] EXT4-fs (loop2): Could not load journal inode [ 419.479230][T13420] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 419.657482][T13444] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18553'. [ 419.711369][T13450] loop5: detected capacity change from 0 to 512 [ 419.718090][T13450] EXT4-fs: Ignoring removed nobh option [ 419.747410][T13450] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.18556: iget: bad i_size value: 38620345925642 [ 419.760553][T13450] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.18556: couldn't read orphan inode 15 (err -117) [ 419.774721][T13450] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.799488][T32392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.008433][T13490] openvswitch: netlink: Message has 6 unknown bytes. [ 420.156648][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 420.364332][T13536] sd 0:0:1:0: device reset [ 420.935019][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 420.935033][ T29] audit: type=1326 audit(398.917:49638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13572 comm="syz.4.18610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 420.968110][ T29] audit: type=1326 audit(398.935:49639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13572 comm="syz.4.18610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 420.991170][ T29] audit: type=1326 audit(398.935:49640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13572 comm="syz.4.18610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 421.014733][ T29] audit: type=1326 audit(398.935:49641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13572 comm="syz.4.18610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 421.037825][ T29] audit: type=1326 audit(398.935:49642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13572 comm="syz.4.18610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=36 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 421.060924][ T29] audit: type=1326 audit(398.935:49643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13572 comm="syz.4.18610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 421.084075][ T29] audit: type=1326 audit(398.935:49644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13572 comm="syz.4.18610" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2ae1ceb69 code=0x7ffc0000 [ 421.132559][T13581] openvswitch: netlink: Message has 6 unknown bytes. [ 421.209272][ T29] audit: type=1326 audit(399.169:49645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.2.18616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 421.232650][ T29] audit: type=1326 audit(399.169:49646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.2.18616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 421.255753][ T29] audit: type=1326 audit(399.169:49647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13586 comm="syz.2.18616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f922dcdeb69 code=0x7ffc0000 [ 421.278912][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 421.399617][T13611] dvmrp1: entered allmulticast mode [ 421.406553][T13611] dvmrp1: left allmulticast mode [ 421.466830][T13623] netlink: 'syz.0.18634': attribute type 3 has an invalid length. [ 421.561741][T13640] 9pnet_fd: Insufficient options for proto=fd [ 421.673948][T13668] netlink: 'syz.4.18654': attribute type 13 has an invalid length. [ 421.683253][T13668] Q6\bY4: left allmulticast mode [ 421.692867][T13668] tunl0: left allmulticast mode [ 421.702343][T13673] usb usb1: usbfs: process 13673 (syz.2.18658) did not claim interface 0 before use [ 421.712860][T13668] gre0: left allmulticast mode [ 421.719708][T13668] gretap0: left allmulticast mode [ 421.732328][T13668] gretap0: refused to change device tx_queue_len [ 421.738882][T13668] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 421.915343][T13703] loop2: detected capacity change from 0 to 8192 [ 422.037185][T13712] lo speed is unknown, defaulting to 1000 [ 422.240352][ T3307] ================================================================== [ 422.248470][ T3307] BUG: KCSAN: data-race in __xa_clear_mark / xas_find_marked [ 422.255857][ T3307] [ 422.258167][ T3307] read-write to 0xffff888118aecfe0 of 8 bytes by interrupt on cpu 0: [ 422.266293][ T3307] __xa_clear_mark+0xf5/0x1e0 [ 422.270958][ T3307] __folio_end_writeback+0x177/0x470 [ 422.276226][ T3307] folio_end_writeback+0x71/0x3d0 [ 422.281253][ T3307] mpage_write_end_io+0x274/0x390 [ 422.286264][ T3307] bio_endio+0x374/0x410 [ 422.290509][ T3307] blk_update_request+0x336/0x730 [ 422.295529][ T3307] blk_mq_end_request+0x26/0x50 [ 422.300382][ T3307] lo_complete_rq+0x98/0x140 [ 422.304967][ T3307] blk_done_softirq+0x74/0xb0 [ 422.309635][ T3307] handle_softirqs+0xb7/0x290 [ 422.314301][ T3307] run_ksoftirqd+0x1c/0x30 [ 422.318703][ T3307] smpboot_thread_fn+0x328/0x530 [ 422.323639][ T3307] kthread+0x486/0x510 [ 422.327693][ T3307] ret_from_fork+0xdd/0x150 [ 422.332189][ T3307] ret_from_fork_asm+0x1a/0x30 [ 422.336940][ T3307] [ 422.339251][ T3307] read to 0xffff888118aecfe0 of 8 bytes by task 3307 on cpu 1: [ 422.346785][ T3307] xas_find_marked+0x218/0x620 [ 422.351542][ T3307] find_get_entry+0x5d/0x380 [ 422.356133][ T3307] filemap_get_folios_tag+0x13b/0x210 [ 422.361502][ T3307] filemap_fdatawait_keep_errors+0x6c/0x180 [ 422.367655][ T3307] sync_inodes_sb+0x39c/0x440 [ 422.372327][ T3307] sync_filesystem+0x102/0x190 [ 422.377078][ T3307] generic_shutdown_super+0x44/0x210 [ 422.382362][ T3307] kill_block_super+0x2a/0x70 [ 422.387030][ T3307] deactivate_locked_super+0x75/0x1c0 [ 422.392395][ T3307] deactivate_super+0x97/0xa0 [ 422.397067][ T3307] cleanup_mnt+0x269/0x2e0 [ 422.401476][ T3307] __cleanup_mnt+0x19/0x20 [ 422.405886][ T3307] task_work_run+0x131/0x1a0 [ 422.410468][ T3307] exit_to_user_mode_loop+0xe4/0x100 [ 422.415749][ T3307] do_syscall_64+0x1d6/0x200 [ 422.420333][ T3307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.426214][ T3307] [ 422.428523][ T3307] value changed: 0xfffffffffffff000 -> 0xffffffc000000000 [ 422.435656][ T3307] [ 422.437968][ T3307] Reported by Kernel Concurrency Sanitizer on: [ 422.444202][ T3307] CPU: 1 UID: 0 PID: 3307 Comm: syz-executor Not tainted 6.16.0-syzkaller-11489-gd2eedaa3909b #0 PREEMPT(voluntary) [ 422.456449][ T3307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 422.466582][ T3307] ================================================================== [ 422.474785][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 423.579453][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 424.691888][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 425.804353][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 426.916726][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 428.029112][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 429.141547][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 430.264657][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 431.366433][ C1] IPVS: rr: UDP 224.0.0.2:0 - no destination available