last executing test programs: 4m12.709110733s ago: executing program 32 (id=1210): unshare(0x2a020400) openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48) unshare(0x2060280) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 4m3.30268524s ago: executing program 33 (id=993): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) 3m10.171052903s ago: executing program 6 (id=3825): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x409, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e2a, 0x3, @private0, 0x407}, 0x1c) listen(r0, 0x39c) 3m10.132575327s ago: executing program 6 (id=3827): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x20, 0x3fa, 0x400, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1, 0x1, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x28021084) 3m10.124195458s ago: executing program 6 (id=3829): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001000080000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 3m10.002666419s ago: executing program 6 (id=3833): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x3e, &(0x7f00000002c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x8, 0x3a, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x1, 0x8}}}}}}, 0x0) 3m9.978229471s ago: executing program 6 (id=3836): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x8b7848, 0x0) 3m9.948711854s ago: executing program 6 (id=3838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x40000f63c) 3m5.294823432s ago: executing program 34 (id=3991): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}}, 0x2400c004) 2m53.896897292s ago: executing program 35 (id=3838): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='sched_switch\x00', r0, 0x0, 0x2}, 0x18) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x2002, 0x0) syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x40000f63c) 2m40.725014625s ago: executing program 8 (id=4938): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=""/88, 0x58}], 0x1}, 0x80000006}], 0x1, 0x40000000, 0x0) 2m39.790724082s ago: executing program 8 (id=4965): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r2, 0x6, 0x401, 0x0, 0x1ff, 0xfffffffc}, 0x14) 2m39.772673304s ago: executing program 8 (id=4966): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x2, @perf_config_ext={0x4ac269ba, 0xaea}, 0x11aa0, 0x30, 0x10000, 0x0, 0x18bb, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='cpu>00||!') 2m39.649425685s ago: executing program 8 (id=4971): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f00000007c0)='./file0/file0\x00', 0x0, 0x1000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 2m39.629735187s ago: executing program 8 (id=4972): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000101010300000000000000000a0000000c0019"], 0x20}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) 2m39.380582339s ago: executing program 8 (id=4985): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000002f80)=""/54) 2m39.38050813s ago: executing program 36 (id=4985): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000002f80)=""/54) 2m27.520333582s ago: executing program 7 (id=5478): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip6gre0\x00'}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x70bd29, 0x300, {0x0, 0x0, 0x0, 0x0, 0x100, 0x42004}, [@IFLA_MTU={0x8, 0x4, 0xffcd}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x884) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, 0x0) 2m27.484548545s ago: executing program 7 (id=5481): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001100)=@newsa={0x138, 0x10, 0x1, 0x70bd2b, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x400800}, {}, 0x0, 0x0, 0x2, 0x4, 0x0, 0x2c}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}]}, 0x138}}, 0x4050) 2m27.401639893s ago: executing program 7 (id=5482): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b000000000000000000000000800000000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fstat(r1, &(0x7f0000000380)) 2m27.382938665s ago: executing program 7 (id=5483): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52e, &(0x7f0000000480)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000440)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2m27.236092858s ago: executing program 7 (id=5484): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(r0, 0x200000000114, 0x2715, &(0x7f0000000580)=""/102393, &(0x7f0000000400)=0x18ff9) 2m27.10861029s ago: executing program 7 (id=5485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 2m27.10851412s ago: executing program 37 (id=5485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 2m26.34521817s ago: executing program 5 (id=5508): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x4, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r2, 0x3, '\x00', 0x0, r1, 0x3, 0x80}, 0x50) 2m26.249600279s ago: executing program 5 (id=5515): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = getpgrp(0x0) r2 = syz_pidfd_open(r1, 0x0) fsetxattr$trusted_overlay_nlink(r2, &(0x7f00000018c0), 0x0, 0x0, 0x3) 2m26.165215247s ago: executing program 5 (id=5518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) membarrier(0x40, 0x0) 2m26.105982032s ago: executing program 5 (id=5520): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2, 0x2}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x0, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='\x00'], 0x1, 0x4f8, &(0x7f00000005c0)="$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") r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r0, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, '\x02\x00\x00\xe2Q\x00\x00H\x905P.D\x01\x00a=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xdc\xf2\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x63) 2m25.984265434s ago: executing program 5 (id=5525): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000700)={r2}, &(0x7f0000000000)=0x8) 2m25.777628202s ago: executing program 5 (id=5533): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r0], 0x20) 2m25.710573268s ago: executing program 38 (id=5533): socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16=r0], 0x20) 19.203691621s ago: executing program 1 (id=10634): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x606c) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 19.156621246s ago: executing program 1 (id=10635): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0x4, 0x5, 0xfffffff9, 0xc6cf, 0xfd, "00000816000001f6150000000100", 0x240001, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x1) 19.118821929s ago: executing program 1 (id=10636): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000200)={[{@stripe={'stripe', 0x3d, 0x8001}}, {@auto_da_alloc}, {@nombcache}, {@nobarrier}, {@init_itable}, {@errors_remount}]}, 0x1, 0x569, &(0x7f00000002c0)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000840), &(0x7f0000000940)=ANY=[], 0x361, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000280)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000880)=ANY=[@ANYBLOB="cec98d6695233d2b3c5db2607d3b", @ANYRESOCT=r0], 0xfe37, 0x0) 18.946414875s ago: executing program 1 (id=10641): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) unshare(0x22020400) mount_setattr(r0, &(0x7f0000000040)='./file0\x00', 0x1100, &(0x7f0000000300)={0x80, 0x2, 0x80000, {r0}}, 0x20) 18.930218746s ago: executing program 1 (id=10642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000003f0001002cbd7000ffdbdf25010000003a0004002c4e2d"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 18.839639085s ago: executing program 1 (id=10647): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x3, 0x3) 18.839565965s ago: executing program 39 (id=10647): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xc5c, &(0x7f00000005c0), 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r0, 0x3, 0x3) 1.523829279s ago: executing program 4 (id=11197): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02130000050000000000000000000000030008"], 0x28}}, 0x0) 1.522895149s ago: executing program 4 (id=11199): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 1.213070158s ago: executing program 2 (id=11215): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) 1.19401812s ago: executing program 2 (id=11217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000200)="c082b44eb524", 0x6}, {&(0x7f0000000240)="a43b2eaab40000000000810065588002", 0x10}], 0x2) 1.149324514s ago: executing program 2 (id=11219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) write$ppp(r2, &(0x7f0000000600)='\x00\x00', 0x2) 1.020609746s ago: executing program 2 (id=11220): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000d40000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020047b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000020000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) syz_read_part_table(0x5c2, &(0x7f0000000000)="$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") 939.942593ms ago: executing program 2 (id=11222): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000380), &(0x7f0000000880)=r1}, 0x20) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0xec, 0x2, 0x0, 0x0}) 878.980169ms ago: executing program 9 (id=11225): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8000000008}, 0x18) r1 = socket$packet(0x11, 0x2, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 878.862519ms ago: executing program 2 (id=11226): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket(0x10, 0x3, 0x9) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r2, r3, 0x0, 0x7fffffffffffffff) 878.542549ms ago: executing program 9 (id=11227): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0}, &(0x7f0000000ac0), &(0x7f0000000b00)=r2}, 0x20) open(&(0x7f0000000400)='./file0\x00', 0x64842, 0x2) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) 753.408151ms ago: executing program 9 (id=11238): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 684.570937ms ago: executing program 9 (id=11229): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x26, 0x0, 0x1, 0x4}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], &(0x7f00000001c0)=""/257, 0x2a, 0x101, 0x6}, 0x28) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) 675.784077ms ago: executing program 9 (id=11230): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1, 0x6, 0x4, 0x9, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 628.048482ms ago: executing program 9 (id=11231): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) r1 = open(&(0x7f0000000100)='./file2\x00', 0x60142, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x181102, 0x0) ftruncate(r2, 0x2007ffb) sendfile(r1, r0, 0x0, 0x201007) 548.519549ms ago: executing program 4 (id=11233): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000200)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x40000000, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 510.862623ms ago: executing program 4 (id=11235): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x0, 0x2, 0xfa}, 0x8) 468.306457ms ago: executing program 4 (id=11236): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000f9000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x8, 0x60000000}, 0x1e) 408.532922ms ago: executing program 4 (id=11239): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x112) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 408.377442ms ago: executing program 3 (id=11240): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x2}, 0x0) 365.473166ms ago: executing program 3 (id=11243): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private2, @in, 0x4e21, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x0, 0x2}, {0xffff, 0x4, 0x0, 0x0, 0x80000001, 0x4d6, 0x1000000, 0x80000000}, {0x800, 0x0, 0x6, 0xffffffffffffffff}, 0x9, 0x200000, 0x0, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x2b}, 0x0, @in6=@mcast1, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x1028}}, 0x20000050) 308.488461ms ago: executing program 3 (id=11245): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfa, 0x3, 0x2, 0x5c, @local, @empty, 0x7800, 0x40, 0x4, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000680)={'syztnl1\x00', 0x0}) 251.793237ms ago: executing program 0 (id=11246): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000200)=0x8, 0x4) recvmmsg(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0xe5}], 0x1, 0x40000000, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20040000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 203.700041ms ago: executing program 3 (id=11247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x1ffffffffffffffd}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0xefff, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x5c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 162.959855ms ago: executing program 0 (id=11248): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000001c0), 0x13f, 0x8}}, 0x20) close(r1) 97.932781ms ago: executing program 0 (id=11249): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005000000010001000a00000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd7e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='rpm_return_int\x00', r1}, 0x18) syz_open_dev$usbfs(&(0x7f0000000240), 0xf, 0xc340) 97.502751ms ago: executing program 3 (id=11250): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) 61.886474ms ago: executing program 0 (id=11251): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) shutdown(r2, 0x1) 486.46µs ago: executing program 3 (id=11252): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f0000000000), 0xd4ba103) unlink(&(0x7f0000000100)='./file0/file1\x00') link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') 188.73µs ago: executing program 0 (id=11253): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r1, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {r3, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 0s ago: executing program 0 (id=11254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x13) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@init_itable}, {@acl}, {@usrjquota}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r1, r1, 0x0, 0xe3aa6ea) kernel console output (not intermixed with test programs): exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 262.745486][ T29] audit: type=1326 audit(504.239:13844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.9.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 262.768691][ T29] audit: type=1326 audit(504.239:13845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.9.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 262.791696][ T29] audit: type=1326 audit(504.239:13846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.9.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 262.814701][ T29] audit: type=1326 audit(504.249:13847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.9.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 262.848248][ T29] audit: type=1326 audit(504.286:13848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.9.9441" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 262.890922][T31438] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9432'. [ 262.936237][ T29] audit: type=1400 audit(504.483:13849): avc: denied { name_bind } for pid=31440 comm="syz.4.9436" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 262.957568][ T29] audit: type=1400 audit(504.483:13850): avc: denied { node_bind } for pid=31440 comm="syz.4.9436" saddr=255.255.255.255 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 263.062523][T31465] netlink: 24 bytes leftover after parsing attributes in process `syz.9.9454'. [ 263.083316][T31465] IPVS: Error connecting to the multicast addr [ 263.236148][T31494] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 263.257932][T31494] SELinux: failed to load policy [ 263.325936][T31515] random: crng reseeded on system resumption [ 263.343515][T31515] Restarting kernel threads ... [ 263.348603][T31515] Done restarting kernel threads. [ 263.411349][T31524] binfmt_misc: register: failed to install interpreter file ./file0 [ 263.503815][T31535] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 263.600361][T31547] loop1: detected capacity change from 0 to 512 [ 263.641381][T31547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 263.658264][T31547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.707558][T31559] loop1: detected capacity change from 0 to 512 [ 263.717012][T31559] EXT4-fs error (device loop1): ext4_xattr_inode_iget:446: comm syz.1.9483: error while reading EA inode 32 err=-116 [ 263.730192][T31559] EXT4-fs (loop1): Remounting filesystem read-only [ 263.736875][T31559] EXT4-fs warning (device loop1): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 263.747097][T31559] EXT4-fs (loop1): 1 orphan inode deleted [ 263.753254][T31559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.779313][T30763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.889111][T31583] binfmt_misc: register: failed to install interpreter file ./file0 [ 264.024168][T31597] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 264.043118][T31599] loop1: detected capacity change from 0 to 128 [ 264.046446][T31597] SELinux: failed to load policy [ 264.156895][T31616] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 264.180884][T31616] SELinux: failed to load policy [ 264.224131][T31623] loop4: detected capacity change from 0 to 128 [ 264.274849][T31632] loop4: detected capacity change from 0 to 512 [ 264.283729][T31632] EXT4-fs error (device loop4): ext4_xattr_inode_iget:446: comm syz.4.9508: error while reading EA inode 32 err=-116 [ 264.296582][T31632] EXT4-fs (loop4): Remounting filesystem read-only [ 264.303226][T31632] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 264.313456][T31632] EXT4-fs (loop4): 1 orphan inode deleted [ 264.327326][T31632] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.359375][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.518104][T31663] loop9: detected capacity change from 0 to 128 [ 264.527052][T31663] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 264.563907][T31671] loop9: detected capacity change from 0 to 512 [ 264.573310][T31671] EXT4-fs error (device loop9): ext4_xattr_inode_iget:446: comm syz.9.9525: error while reading EA inode 32 err=-116 [ 264.586154][T31671] EXT4-fs (loop9): Remounting filesystem read-only [ 264.593544][T31671] EXT4-fs warning (device loop9): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 264.603756][T31671] EXT4-fs (loop9): 1 orphan inode deleted [ 264.609902][T31671] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.633809][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.746859][T31693] netlink: 'syz.9.9532': attribute type 10 has an invalid length. [ 264.754836][T31693] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9532'. [ 264.765623][T31693] batman_adv: batadv0: Adding interface: veth1_vlan [ 264.772259][T31693] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.800633][T31693] batman_adv: batadv0: Interface activated: veth1_vlan [ 264.914790][T31705] loop0: detected capacity change from 0 to 512 [ 264.931768][T31705] EXT4-fs error (device loop0): ext4_xattr_inode_iget:446: comm syz.0.9539: error while reading EA inode 32 err=-116 [ 264.945016][T31705] EXT4-fs (loop0): Remounting filesystem read-only [ 264.951513][T31705] EXT4-fs warning (device loop0): ext4_evict_inode:256: couldn't mark inode dirty (err -30) [ 264.961720][T31705] EXT4-fs (loop0): 1 orphan inode deleted [ 264.967929][T31705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.990717][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.006396][T31711] loop1: detected capacity change from 0 to 512 [ 265.033497][T31711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.057653][T31728] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 265.066763][T31728] SELinux: failed to load policy [ 265.079874][T31711] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.9553: corrupted inode contents [ 265.104950][T31711] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #2: comm syz.1.9553: mark_inode_dirty error [ 265.117640][T31711] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #2: comm syz.1.9553: corrupted inode contents [ 265.148563][T31711] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.9553: mark_inode_dirty error [ 265.185659][T30763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.268623][T31765] sg_write: process 87 (syz.1.9571) changed security contexts after opening file descriptor, this is not allowed. [ 265.344426][T31785] team0 (unregistering): Port device team_slave_0 removed [ 265.358271][T31785] team0 (unregistering): Port device team_slave_1 removed [ 265.446215][T31829] netlink: 'syz.9.9572': attribute type 7 has an invalid length. [ 265.518753][T31841] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9577'. [ 265.542766][T31846] loop4: detected capacity change from 0 to 256 [ 265.561540][T31851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9592'. [ 265.591050][T31856] veth2: entered promiscuous mode [ 265.596151][T31856] veth2: entered allmulticast mode [ 265.840653][T31910] SELinux: failed to load policy [ 265.888277][ T8265] kernel write not supported for file bpf-prog (pid: 8265 comm: kworker/1:8) [ 265.918699][T31923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9605'. [ 265.928654][T31923] netlink: 'syz.4.9605': attribute type 4 has an invalid length. [ 265.970929][T31927] netlink: 'syz.4.9608': attribute type 39 has an invalid length. [ 266.048896][T31943] netlink: 'syz.1.9615': attribute type 3 has an invalid length. [ 266.106587][T31949] netlink: 'syz.0.9618': attribute type 3 has an invalid length. [ 266.132461][T31955] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 266.157421][T31955] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 266.178273][T31955] EXT4-fs (loop1): shut down requested (0) [ 266.192708][T31965] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 266.199228][T31965] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 266.206993][T31965] vhci_hcd vhci_hcd.0: Device attached [ 266.213391][T30763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.220020][T31968] vlan2: entered allmulticast mode [ 266.227483][T31968] geneve1: entered allmulticast mode [ 266.233353][T31967] vhci_hcd: connection closed [ 266.233666][ T5079] vhci_hcd vhci_hcd.0: stop threads [ 266.243739][ T5079] vhci_hcd vhci_hcd.0: release socket [ 266.249148][ T5079] vhci_hcd vhci_hcd.0: disconnect device [ 266.435248][T32002] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9637'. [ 266.586343][T32028] netlink: 'syz.1.9646': attribute type 4 has an invalid length. [ 266.628438][T32038] netlink: 'syz.4.9650': attribute type 3 has an invalid length. [ 266.644777][T32032] pim6reg1: entered allmulticast mode [ 266.804195][T32065] xt_hashlimit: max too large, truncated to 1048576 [ 266.855557][T32071] program syz.4.9664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 266.877519][T32071] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 266.887357][T32076] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.910833][T32076] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.9666: bg 0: block 345: padding at end of block bitmap is not set [ 266.951130][T32076] EXT4-fs (loop0): Remounting filesystem read-only [ 266.999497][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.135723][T32119] FAT-fs (loop1): Directory bread(block 162) failed [ 267.147033][T32119] FAT-fs (loop1): Directory bread(block 163) failed [ 267.153661][T32119] FAT-fs (loop1): Directory bread(block 164) failed [ 267.171315][T32119] FAT-fs (loop1): Directory bread(block 165) failed [ 267.196664][T32119] FAT-fs (loop1): Directory bread(block 166) failed [ 267.233255][T32119] FAT-fs (loop1): Directory bread(block 167) failed [ 267.250293][T32119] FAT-fs (loop1): Directory bread(block 168) failed [ 267.268590][T32119] FAT-fs (loop1): Directory bread(block 169) failed [ 267.296345][T32119] FAT-fs (loop1): Directory bread(block 162) failed [ 267.302997][T32119] FAT-fs (loop1): Directory bread(block 163) failed [ 267.310429][T32119] syz.1.9678: attempt to access beyond end of device [ 267.310429][T32119] loop1: rw=8388611, sector=226, nr_sectors = 6 limit=128 [ 267.324109][T32119] syz.1.9678: attempt to access beyond end of device [ 267.324109][T32119] loop1: rw=8390659, sector=232, nr_sectors = 2 limit=128 [ 267.339452][T32130] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 267.386936][T32140] netlink: 'syz.9.9683': attribute type 1 has an invalid length. [ 267.419303][T32143] ipt_ECN: cannot use operation on non-tcp rule [ 267.470974][T32145] EXT4-fs error (device loop9): ext4_do_update_inode:5617: inode #18: comm syz.9.9685: corrupted inode contents [ 267.506770][T32145] EXT4-fs (loop9): Remounting filesystem read-only [ 267.548769][T32145] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 267.638505][T32165] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 267.660796][T32165] EXT4-fs (loop4): 1 truncate cleaned up [ 267.821291][T32180] __nla_validate_parse: 3 callbacks suppressed [ 267.821304][T32180] netlink: 115988 bytes leftover after parsing attributes in process `syz.4.9696'. [ 267.982802][T32201] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9706'. [ 267.992144][ T29] kauditd_printk_skb: 273 callbacks suppressed [ 267.992158][ T29] audit: type=1400 audit(509.216:14124): avc: denied { read } for pid=32203 comm="syz.9.9707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 268.028887][ T29] audit: type=1400 audit(509.216:14125): avc: denied { nlmsg_write } for pid=32202 comm="syz.0.9705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 268.049392][ T29] audit: type=1326 audit(509.244:14126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.072619][ T29] audit: type=1326 audit(509.244:14127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.075885][T32209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9709'. [ 268.095854][ T29] audit: type=1326 audit(509.244:14128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.117954][T32209] netlink: 'syz.4.9709': attribute type 1 has an invalid length. [ 268.127548][ T29] audit: type=1326 audit(509.244:14129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.135296][T32209] netlink: 'syz.4.9709': attribute type 2 has an invalid length. [ 268.166007][ T29] audit: type=1326 audit(509.244:14130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.189002][ T29] audit: type=1326 audit(509.244:14131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.212058][ T29] audit: type=1326 audit(509.244:14132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.235259][ T29] audit: type=1326 audit(509.244:14133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32206 comm="syz.4.9708" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f13d3f749 code=0x7ffc0000 [ 268.330155][T32226] macvtap2: entered promiscuous mode [ 268.335652][T32226] macvtap2: entered allmulticast mode [ 268.622822][T32256] EXT4-fs: inline encryption not supported [ 268.628687][T32256] EXT4-fs: Ignoring removed orlov option [ 268.634794][T32256] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 268.692452][T32265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9731'. [ 269.078989][T32279] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9747'. [ 269.122080][T32285] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9739'. [ 269.131028][T32285] netlink: 'syz.0.9739': attribute type 2 has an invalid length. [ 269.146672][T32287] set_capacity_and_notify: 11 callbacks suppressed [ 269.146683][T32287] loop1: detected capacity change from 0 to 164 [ 269.425016][T32331] loop1: detected capacity change from 0 to 128 [ 269.484104][T32337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9762'. [ 270.056702][T32385] loop9: detected capacity change from 0 to 512 [ 270.065759][T32385] EXT4-fs mount: 12 callbacks suppressed [ 270.065770][T32385] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.116363][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.146906][T32400] loop0: detected capacity change from 0 to 512 [ 270.190677][T32400] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.259855][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.412564][T32451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9807'. [ 270.620193][T32469] loop0: detected capacity change from 0 to 512 [ 270.655649][T32469] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9814: Failed to acquire dquot type 1 [ 270.678359][T32464] loop9: detected capacity change from 0 to 32768 [ 270.688123][T32469] EXT4-fs (loop0): 1 truncate cleaned up [ 270.694951][ T5098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.708092][T32469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.731205][T32464] loop9: p1 p2 p3 < > p4 < p5 p6 > [ 270.736538][T32464] loop9: p1 start 460800 is beyond EOD, truncated [ 270.743037][T32464] loop9: p2 size 83886080 extends beyond EOD, truncated [ 270.762140][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.778432][T32464] loop9: p5 start 460800 is beyond EOD, truncated [ 270.780378][ T5098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.784903][T32464] loop9: p6 size 83886080 extends beyond EOD, truncated [ 270.872263][ T5098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.962687][T32508] SELinux: failed to load policy [ 270.974817][ T5098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.991764][T32515] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9825'. [ 271.054524][T32530] loop1: detected capacity change from 0 to 1024 [ 271.096984][T32530] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.181011][ T5098] team0: Port device gtp0 removed [ 271.199502][T30763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.263754][T32570] loop9: detected capacity change from 0 to 256 [ 271.276881][ T5098] bond0 (unregistering): Released all slaves [ 271.328361][ T8265] Process accounting resumed [ 271.346493][T32587] sch_tbf: burst 22 is lower than device lo mtu (65550) ! [ 271.375296][ T5098] hsr_slave_0: left promiscuous mode [ 271.380915][ T5098] hsr_slave_1: left promiscuous mode [ 271.391291][ T5098] veth1_macvtap: left promiscuous mode [ 271.405832][ T5098] veth0_macvtap: left promiscuous mode [ 271.413007][ T5098] veth1_vlan: left promiscuous mode [ 271.418351][ T5098] veth0_vlan: left promiscuous mode [ 271.440485][T32608] sd 0:0:1:0: device reset [ 271.560871][T32621] loop0: detected capacity change from 0 to 256 [ 271.682517][T32642] loop9: detected capacity change from 0 to 2048 [ 271.702484][T32642] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.733799][T32487] chnl_net:caif_netlink_parms(): no params data found [ 271.791779][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.833634][T32487] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.840858][T32487] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.848124][T32487] bridge_slave_0: entered allmulticast mode [ 271.855082][T32487] bridge_slave_0: entered promiscuous mode [ 271.855968][ T317] netlink: 256 bytes leftover after parsing attributes in process `syz.9.9862'. [ 271.867456][T32487] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.877132][T32487] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.884537][T32487] bridge_slave_1: entered allmulticast mode [ 271.891124][T32487] bridge_slave_1: entered promiscuous mode [ 271.922537][T32487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.936983][T32487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.976144][ T5098] IPVS: stop unused estimator thread 0... [ 271.983633][T32487] team0: Port device team_slave_0 added [ 271.994080][T32487] team0: Port device team_slave_1 added [ 272.029547][T32487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.036612][T32487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.062720][T32487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.072423][ T412] netlink: 'syz.4.9866': attribute type 8 has an invalid length. [ 272.120741][T32487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.127768][T32487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.153708][T32487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.195468][T32487] hsr_slave_0: entered promiscuous mode [ 272.202152][T32487] hsr_slave_1: entered promiscuous mode [ 272.208394][T32487] debugfs: 'hsr0' already exists in 'hsr' [ 272.214183][T32487] Cannot create hsr debugfs directory [ 272.272326][ T467] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 272.415900][ T546] EXT4-fs error (device loop9): ext4_free_blocks:6728: comm syz.9.9874: Freeing blocks not in datazone - block = 0, count = 16 [ 272.566924][T32151] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 272.589439][T32487] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.599689][ T5038] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 272.611908][ T5038] EXT4-fs (loop9): This should not happen!! Data will be lost [ 272.611908][ T5038] [ 272.621582][ T5038] EXT4-fs (loop9): Total free blocks count 0 [ 272.627637][ T5038] EXT4-fs (loop9): Free/Dirty block details [ 272.633621][ T5038] EXT4-fs (loop9): free_blocks=16 [ 272.638653][ T5038] EXT4-fs (loop9): dirty_blocks=16 [ 272.643944][ T5038] EXT4-fs (loop9): Block reservation details [ 272.650021][ T5038] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 272.657910][T32487] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.676530][T32487] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.685866][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 272.689445][T32487] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.732569][T32487] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.739670][T32487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.747016][T32487] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.754083][T32487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.771677][T32135] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.783586][T32135] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.804280][ T598] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 272.843606][T32487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.863400][T32487] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.873158][ T5038] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.880226][ T5038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.891691][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.898772][ T5047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 272.916840][T32487] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.927271][T32487] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.987763][ T616] SELinux: failed to load policy [ 273.009157][T32487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.074931][ T643] EXT4-fs: Ignoring removed nomblk_io_submit option [ 273.089371][T32487] veth0_vlan: entered promiscuous mode [ 273.094693][ T643] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.100099][T32487] veth1_vlan: entered promiscuous mode [ 273.151509][T32487] veth0_macvtap: entered promiscuous mode [ 273.166610][T32487] veth1_macvtap: entered promiscuous mode [ 273.183438][T32487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.196464][T32487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.206229][ T5092] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.225178][ T5092] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.238052][ T1913] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.258023][ T1913] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.291574][ T659] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 273.302880][ T658] IPVS: stopping master sync thread 659 ... [ 273.332145][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.351147][ T665] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.373158][ T29] kauditd_printk_skb: 408 callbacks suppressed [ 273.373173][ T29] audit: type=1400 audit(514.239:14540): avc: denied { read } for pid=669 comm="syz.3.9911" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 273.401990][ T29] audit: type=1400 audit(514.239:14541): avc: denied { open } for pid=669 comm="syz.3.9911" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 273.425509][ T29] audit: type=1400 audit(514.239:14542): avc: denied { bind } for pid=670 comm="syz.1.9910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 273.448102][ T29] audit: type=1400 audit(514.314:14543): avc: denied { listen } for pid=677 comm="syz.1.9912" lport=44764 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.479343][ T665] bridge_slave_0: left allmulticast mode [ 273.485051][ T665] bridge_slave_0: left promiscuous mode [ 273.488604][ T29] audit: type=1400 audit(514.332:14544): avc: denied { accept } for pid=677 comm="syz.1.9912" lport=44764 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.491158][ T665] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.513222][ T29] audit: type=1400 audit(514.332:14545): avc: denied { setopt } for pid=677 comm="syz.1.9912" lport=44764 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 273.546506][ T665] bridge_slave_1: left allmulticast mode [ 273.552483][ T665] bridge_slave_1: left promiscuous mode [ 273.558221][ T665] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.568875][ T665] bond0: (slave bond_slave_0): Releasing backup interface [ 273.585769][ T665] bond0: (slave bond_slave_1): Releasing backup interface [ 273.595305][ T29] audit: type=1400 audit(514.454:14546): avc: denied { ioctl } for pid=679 comm="syz.1.9913" path="socket:[83753]" dev="sockfs" ino=83753 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 273.628037][ T665] team0: Port device team_slave_0 removed [ 273.648468][ T665] team0: Port device team_slave_1 removed [ 273.655147][ T665] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.662586][ T665] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.677146][ T665] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.684659][ T665] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.694424][ T665] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 273.738599][ T29] audit: type=1400 audit(514.585:14547): avc: denied { bind } for pid=682 comm="syz.1.9914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 273.757442][ T29] audit: type=1400 audit(514.585:14548): avc: denied { name_bind } for pid=682 comm="syz.1.9914" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 273.778865][ T29] audit: type=1400 audit(514.585:14549): avc: denied { node_bind } for pid=682 comm="syz.1.9914" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 273.799929][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.822570][ T688] EXT4-fs: dax option not supported [ 273.864881][ T695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 273.894448][ T695] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.936193][ T706] pimreg: entered allmulticast mode [ 273.942766][ T706] pimreg: left allmulticast mode [ 273.943498][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.987488][ T718] EXT4-fs: inline encryption not supported [ 273.993421][ T718] EXT4-fs: Ignoring removed orlov option [ 274.003424][ T718] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 274.023103][ T718] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.092685][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.180440][ T749] EXT4-fs: Ignoring removed nobh option [ 274.186471][ T749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 274.222808][ T749] EXT4-fs (loop0): 1 truncate cleaned up [ 274.233352][ T749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.310487][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.389130][ T779] netlink: 'syz.4.9942': attribute type 7 has an invalid length. [ 274.403032][ T782] veth2: entered promiscuous mode [ 274.408171][ T782] veth2: entered allmulticast mode [ 274.424783][ T789] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 274.447786][ T789] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 274.503536][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.537833][ T817] set_capacity_and_notify: 9 callbacks suppressed [ 274.537848][ T817] loop9: detected capacity change from 0 to 1024 [ 274.579757][ T817] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.600493][ T826] loop3: detected capacity change from 0 to 2048 [ 274.622616][ T826] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 274.623534][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.644461][ T826] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.9953: bg 0: block 345: padding at end of block bitmap is not set [ 274.659407][ T826] EXT4-fs (loop3): Remounting filesystem read-only [ 274.676371][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.810630][ T861] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 274.934803][ T884] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 274.935068][ T881] IPVS: stopping master sync thread 884 ... [ 275.034667][ T897] netlink: 'syz.3.9981': attribute type 4 has an invalid length. [ 275.053462][ T895] netlink: 'syz.4.9982': attribute type 3 has an invalid length. [ 275.065868][ T899] loop1: detected capacity change from 0 to 2048 [ 275.116127][ T899] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.148240][ T911] pim6reg1: entered allmulticast mode [ 275.165532][ T899] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.9983: bg 0: block 345: padding at end of block bitmap is not set [ 275.180022][ T899] EXT4-fs (loop1): Remounting filesystem read-only [ 275.183611][ T919] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 275.203520][T30763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.219797][ T922] vlan0: entered allmulticast mode [ 275.224940][ T922] geneve1: entered allmulticast mode [ 275.240903][ T932] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 275.241182][ T930] IPVS: stopping master sync thread 932 ... [ 275.366289][ T958] hub 1-0:1.0: USB hub found [ 275.371505][ T958] hub 1-0:1.0: 8 ports detected [ 275.388864][ T959] loop9: detected capacity change from 0 to 2048 [ 275.413696][ T964] netlink: 'syz.0.10004': attribute type 1 has an invalid length. [ 275.422102][ T959] loop9: p1 < > p4 [ 275.426581][ T959] loop9: p4 size 8388608 extends beyond EOD, truncated [ 275.466461][ T979] vhci_hcd vhci_hcd.0: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 275.608892][ T1026] loop0: detected capacity change from 0 to 512 [ 275.616221][ T1026] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 275.649747][ T1026] EXT4-fs (loop0): 1 truncate cleaned up [ 275.655979][ T1026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.758355][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.853485][ T1040] loop4: detected capacity change from 0 to 2048 [ 275.877339][ T1040] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 275.890577][ T1035] loop3: detected capacity change from 0 to 4096 [ 275.905912][ T1051] loop0: detected capacity change from 0 to 1024 [ 275.911240][ T1040] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10017: bg 0: block 345: padding at end of block bitmap is not set [ 275.927654][ T1035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.940435][ T1040] EXT4-fs (loop4): Remounting filesystem read-only [ 275.948421][ T1051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 275.989928][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.001507][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.047472][ T1066] loop3: detected capacity change from 0 to 1024 [ 276.074220][ T1066] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.081713][ T1071] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.10020: Freeing blocks not in datazone - block = 0, count = 16 [ 276.107974][ T1066] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.123867][ T1075] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 276.185777][ T1077] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 276.216790][ T5108] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:64: bg 0: block 112: padding at end of block bitmap is not set [ 276.247378][ T5108] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 276.259782][ T5108] EXT4-fs (loop0): This should not happen!! Data will be lost [ 276.259782][ T5108] [ 276.270784][ T1079] SELinux: Context system_u:object_r:ppp_device_t:s0 is not valid (left unmapped). [ 276.285911][T18969] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 276.350776][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.394861][ T1093] netlink: 'syz.3.10031': attribute type 39 has an invalid length. [ 276.474684][ T1097] __nla_validate_parse: 1 callbacks suppressed [ 276.474702][ T1097] netlink: 444 bytes leftover after parsing attributes in process `syz.1.10035'. [ 276.504194][ T1097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10035'. [ 276.735117][ T1139] loop4: detected capacity change from 0 to 1024 [ 276.741943][ T1139] EXT4-fs: Ignoring removed nomblk_io_submit option [ 276.762528][ T1133] SELinux: failed to load policy [ 276.768213][ T1139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.805645][ T1142] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.900976][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.938476][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.118894][ T1206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.132396][ T1209] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 277.150279][ T1209] EXT4-fs (loop4): 1 truncate cleaned up [ 277.156441][ T1209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.176385][ T1206] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.230527][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.293500][ T1230] tls_set_device_offload_rx: netdev not found [ 277.300655][ T1227] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 277.388601][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.504626][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.528989][ T1252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 277.699362][ T1252] EXT4-fs error (device loop3): ext4_free_blocks:6728: comm syz.3.10078: Freeing blocks not in datazone - block = 0, count = 16 [ 277.770154][ T1293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10085'. [ 277.800423][ T1913] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm kworker/u8:8: bg 0: block 112: padding at end of block bitmap is not set [ 277.838947][ T1913] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 277.851426][ T1913] EXT4-fs (loop3): This should not happen!! Data will be lost [ 277.851426][ T1913] [ 277.921563][ T1301] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 277.946381][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 277.956147][ T1306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10091'. [ 277.958023][ T1301] EXT4-fs (loop9): 1 truncate cleaned up [ 277.971990][ T1301] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.066747][T28893] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.089699][ T1317] netlink: 'syz.3.10093': attribute type 1 has an invalid length. [ 278.103031][ T1320] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 278.121135][ T1322] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.151458][ T1327] SELinux: failed to load policy [ 278.198476][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.300303][ T1337] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 278.388772][ T1343] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.10098: Freeing blocks not in datazone - block = 0, count = 16 [ 278.458118][ T5108] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:64: bg 0: block 112: padding at end of block bitmap is not set [ 278.505838][ T5108] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 278.518201][ T5108] EXT4-fs (loop4): This should not happen!! Data will be lost [ 278.518201][ T5108] [ 278.562109][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 278.647830][ T1358] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.704009][T30763] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.719575][ T1367] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.738372][ T1379] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.750355][ T1371] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.768917][ T1379] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.798731][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.896927][ T1396] netlink: 444 bytes leftover after parsing attributes in process `syz.4.10116'. [ 278.938831][ T1396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10116'. [ 278.968434][ T1406] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10120'. [ 279.058231][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 279.058246][ T29] audit: type=1326 audit(519.561:14812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4774c0f749 code=0x7ffc0000 [ 279.095323][ T1415] EXT4-fs: Ignoring removed i_version option [ 279.108237][ T29] audit: type=1326 audit(519.561:14813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4774c0f749 code=0x7ffc0000 [ 279.131257][ T29] audit: type=1326 audit(519.561:14814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4774c0f783 code=0x7ffc0000 [ 279.154178][ T29] audit: type=1326 audit(519.561:14815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4774c0e1ff code=0x7ffc0000 [ 279.177079][ T29] audit: type=1326 audit(519.561:14816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f4774c0f7d7 code=0x7ffc0000 [ 279.200039][ T29] audit: type=1326 audit(519.599:14817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4774c0df90 code=0x7ffc0000 [ 279.223022][ T29] audit: type=1326 audit(519.599:14818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4774c0f34b code=0x7ffc0000 [ 279.245999][ T29] audit: type=1326 audit(519.599:14819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4774c0e3aa code=0x7ffc0000 [ 279.268923][ T29] audit: type=1326 audit(519.599:14820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f4774c0e3aa code=0x7ffc0000 [ 279.291747][ T29] audit: type=1326 audit(519.599:14821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1412 comm="syz.1.10123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f4774c0de97 code=0x7ffc0000 [ 279.863670][ T1399] EXT4-fs (loop9): orphan cleanup on readonly fs [ 279.870204][ T1399] EXT4-fs error (device loop9): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.9.10114: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 279.885375][ T1399] EXT4-fs warning (device loop9): ext4_xattr_inode_dec_ref_all:1230: inode #11: comm syz.9.10114: ea_inode dec ref err=-117 [ 279.898462][ T1399] EXT4-fs (loop9): 1 orphan inode deleted [ 279.939768][ T1428] set_capacity_and_notify: 16 callbacks suppressed [ 279.939798][ T1428] loop1: detected capacity change from 0 to 512 [ 280.003622][ T1442] loop3: detected capacity change from 0 to 128 [ 280.087377][ T1448] loop4: detected capacity change from 0 to 2048 [ 280.139890][ T1448] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 280.155197][ T1448] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 280.167848][ T1448] EXT4-fs (loop4): This should not happen!! Data will be lost [ 280.167848][ T1448] [ 280.177486][ T1448] EXT4-fs (loop4): Total free blocks count 0 [ 280.183687][ T1448] EXT4-fs (loop4): Free/Dirty block details [ 280.185251][ T1913] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 280.189688][ T1448] EXT4-fs (loop4): free_blocks=2415919104 [ 280.201834][ T1913] EXT4-fs (loop4): This should not happen!! Data will be lost [ 280.201834][ T1913] [ 280.201846][ T1913] EXT4-fs (loop4): Total free blocks count 0 [ 280.201856][ T1913] EXT4-fs (loop4): Free/Dirty block details [ 280.207583][ T1448] EXT4-fs (loop4): dirty_blocks=32 [ 280.293667][ T1477] loop0: detected capacity change from 0 to 128 [ 280.425933][ T1514] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 280.500170][ T1525] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 281.107095][ T1563] loop0: detected capacity change from 0 to 512 [ 281.116629][ T1563] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 281.127781][ T1563] EXT4-fs (loop0): 1 truncate cleaned up [ 281.183584][ T1913] Bluetooth: hci0: Frame reassembly failed (-84) [ 281.573812][ T1659] loop0: detected capacity change from 0 to 512 [ 281.592188][ T1659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 281.609120][ T1670] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10184'. [ 281.634830][ T1675] loop4: detected capacity change from 0 to 256 [ 281.725491][ T1642] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 281.898707][ T1708] loop9: detected capacity change from 0 to 1024 [ 281.915523][ T1708] EXT4-fs: Ignoring removed nomblk_io_submit option [ 281.978745][ T1739] loop3: detected capacity change from 0 to 512 [ 282.036385][ T1752] loop3: detected capacity change from 0 to 512 [ 282.043636][ T1752] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 282.231809][ T1776] netlink: 332 bytes leftover after parsing attributes in process `syz.3.10203'. [ 282.446771][ T1790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10209'. [ 282.494128][ T1790] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10209'. [ 283.353583][ T6542] Bluetooth: hci0: command 0x1003 tx timeout [ 283.359666][ T7217] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 284.082130][ T1889] netlink: 8 bytes leftover after parsing attributes in process `syz.9.10236'. [ 284.153049][ T1905] 9p: Bad value for 'wfdno' [ 284.316627][ T1896] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 284.321923][ T1896] loop0: p1 start 460800 is beyond EOD, truncated [ 284.328410][ T1896] loop0: p2 size 83886080 extends beyond EOD, truncated [ 284.342749][ T1896] loop0: p5 start 460800 is beyond EOD, truncated [ 284.349303][ T1896] loop0: p6 size 83886080 extends beyond EOD, truncated [ 284.457315][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 284.457373][ T29] audit: type=1400 audit(524.612:15052): avc: denied { mount } for pid=1964 comm="syz.3.10257" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 284.489590][ T29] audit: type=1400 audit(524.612:15053): avc: denied { mounton } for pid=1964 comm="syz.3.10257" path="/81/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 284.511997][ T29] audit: type=1400 audit(524.640:15054): avc: denied { unmount } for pid=32487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 284.571032][ T1973] bridge_slave_0: left allmulticast mode [ 284.576870][ T1973] bridge_slave_0: left promiscuous mode [ 284.582593][ T1973] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.604614][ T1973] bridge_slave_1: left allmulticast mode [ 284.610383][ T1973] bridge_slave_1: left promiscuous mode [ 284.616041][ T1973] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.627157][ T1973] bond0: (slave bond_slave_0): Releasing backup interface [ 284.637008][ T1973] bond0: (slave bond_slave_1): Releasing backup interface [ 284.650798][ T1973] team0: Port device team_slave_0 removed [ 284.660165][ T1973] team0: Port device team_slave_1 removed [ 284.666858][ T1973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.674418][ T1973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.683211][ T1973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.690705][ T1973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.700827][ T1973] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 284.823034][ T29] audit: type=1326 audit(524.958:15055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 284.862172][ T29] audit: type=1326 audit(524.977:15056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 284.885207][ T29] audit: type=1326 audit(524.977:15057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 284.908198][ T29] audit: type=1326 audit(524.977:15058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 284.931202][ T29] audit: type=1326 audit(524.977:15059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 284.954192][ T29] audit: type=1326 audit(524.977:15060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 284.977217][ T29] audit: type=1326 audit(524.977:15061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1996 comm="syz.3.10263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 285.215811][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10279'. [ 285.235605][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10279'. [ 285.245013][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10279'. [ 285.254320][ T2015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10279'. [ 285.311666][ T2023] set_capacity_and_notify: 9 callbacks suppressed [ 285.311683][ T2023] loop4: detected capacity change from 0 to 512 [ 285.380498][ T2023] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 285.459765][ T2031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10273'. [ 285.514754][ T2036] loop9: detected capacity change from 0 to 1024 [ 285.523355][ T2036] EXT4-fs: Ignoring removed bh option [ 285.555902][ T2036] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4215: comm syz.9.10276: Allocating blocks 385-513 which overlap fs metadata [ 285.576378][ T2036] EXT4-fs (loop9): pa ffff888106335e70: logic 16, phys. 129, len 24 [ 285.584504][ T2036] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 8 [ 285.662287][ T2056] netlink: 256 bytes leftover after parsing attributes in process `syz.0.10283'. [ 285.876975][ T2079] random: crng reseeded on system resumption [ 285.907811][ T2081] SELinux: failed to load policy [ 285.934353][ T2086] loop1: detected capacity change from 0 to 512 [ 285.941522][ T2086] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 286.139670][ T2132] loop9: detected capacity change from 0 to 512 [ 286.146896][ T2132] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 286.314275][ T2148] loop1: detected capacity change from 0 to 512 [ 286.342297][ T2148] EXT4-fs (loop1): 1 orphan inode deleted [ 286.357863][ T5068] EXT4-fs error (device loop1): ext4_release_dquot:7022: comm kworker/u8:37: Failed to release dquot type 1 [ 286.485047][ T2181] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 286.600417][ T2198] loop9: detected capacity change from 0 to 1024 [ 286.607612][ T2198] EXT4-fs: inline encryption not supported [ 286.613522][ T2198] EXT4-fs: Ignoring removed orlov option [ 286.619675][ T2198] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 286.760475][ T2219] loop1: detected capacity change from 0 to 128 [ 286.863704][ T2237] SELinux: failed to load policy [ 286.912410][ T2244] loop0: detected capacity change from 0 to 512 [ 286.926540][ T2244] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 287.033643][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x1 [ 287.041176][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.048607][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.056075][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.063636][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.071047][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.078485][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.085996][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.093418][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.100887][ T8280] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 287.112927][ T8280] hid-generic 0000:0000:0000.000E: hidraw0: HID v8.00 Device [syz0] on syz0 [ 287.213551][ T2281] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 287.885403][ T2297] __nla_validate_parse: 3 callbacks suppressed [ 287.885419][ T2297] netlink: 272 bytes leftover after parsing attributes in process `syz.9.10367'. [ 287.966362][ T2303] loop9: detected capacity change from 0 to 128 [ 288.122510][ T2324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10368'. [ 288.148667][ T2324] xfrm1: entered promiscuous mode [ 288.153753][ T2324] xfrm1: entered allmulticast mode [ 288.168018][ T2324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10368'. [ 288.210396][ T2337] loop1: detected capacity change from 0 to 1024 [ 288.217574][ T2337] EXT4-fs: Ignoring removed bh option [ 288.223710][ T2337] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 288.244895][ T2345] 9p: Bad value for 'source' [ 288.369347][ T2365] netlink: 'syz.1.10383': attribute type 1 has an invalid length. [ 288.392110][ T2365] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 288.402446][ T2365] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 288.413647][ T2365] bond1: (slave vxcan3): making interface the new active one [ 288.422156][ T2365] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 288.470102][ T2417] netlink: 44 bytes leftover after parsing attributes in process `syz.1.10388'. [ 288.479211][ T2417] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10388'. [ 288.488288][ T2417] netlink: 'syz.1.10388': attribute type 6 has an invalid length. [ 288.496190][ T2417] netlink: 'syz.1.10388': attribute type 5 has an invalid length. [ 288.504003][ T2417] netlink: 43 bytes leftover after parsing attributes in process `syz.1.10388'. [ 288.592872][ T2430] EXT4-fs: inline encryption not supported [ 288.598739][ T2430] EXT4-fs: Ignoring removed orlov option [ 288.604940][ T2430] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 288.714006][ T2447] EXT4-fs: dax option not supported [ 288.981071][ T2498] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10413'. [ 288.990634][ T2498] syz_tun: entered promiscuous mode [ 288.997877][ T2498] syz_tun: refused to change device tx_queue_len [ 289.148836][ T2507] SELinux: failed to load policy [ 289.185263][ T2519] netlink: 'syz.1.10420': attribute type 13 has an invalid length. [ 289.218804][ T2519] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 289.287079][ T2524] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 289.316684][ T2531] journal_path: Non-blockdev passed as './bus' [ 289.322961][ T2531] EXT4-fs: error: could not find journal device path [ 289.914882][ T29] kauditd_printk_skb: 264 callbacks suppressed [ 289.914897][ T29] audit: type=1400 audit(529.710:15324): avc: denied { append } for pid=2569 comm="syz.4.10433" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 290.294107][ T29] audit: type=1400 audit(530.075:15325): avc: denied { sqpoll } for pid=2558 comm="syz.9.10436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 290.312930][ T29] audit: type=1400 audit(530.075:15326): avc: denied { allowed } for pid=2558 comm="syz.9.10436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 290.449356][ T2603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10449'. [ 290.458474][ T2603] netlink: 'syz.0.10449': attribute type 11 has an invalid length. [ 290.466423][ T2603] netlink: 'syz.0.10449': attribute type 14 has an invalid length. [ 290.499155][ T29] audit: type=1400 audit(530.141:15327): avc: denied { read write } for pid=18969 comm="syz-executor" name="loop0" dev="devtmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.522022][ T29] audit: type=1400 audit(530.141:15328): avc: denied { open } for pid=18969 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=846 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.544844][ T29] audit: type=1400 audit(530.141:15329): avc: denied { ioctl } for pid=18969 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=846 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 290.569117][ T29] audit: type=1400 audit(530.159:15330): avc: denied { create } for pid=2593 comm="syz.3.10448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.588171][ T29] audit: type=1400 audit(530.159:15331): avc: denied { setopt } for pid=2593 comm="syz.3.10448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 290.607190][ T29] audit: type=1400 audit(530.169:15332): avc: denied { block_suspend } for pid=2593 comm="syz.3.10448" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 290.628479][ T29] audit: type=1400 audit(530.206:15333): avc: denied { map_create } for pid=2601 comm="syz.3.10450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 290.648766][ T2603] vxlan1: entered promiscuous mode [ 290.655205][ T5040] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.712776][ T5040] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.732085][ T5040] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.743955][ T5040] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 290.776963][ T2620] macvlan1: entered promiscuous mode [ 290.782956][ T2619] macvlan1: left promiscuous mode [ 290.801724][ T2624] set_capacity_and_notify: 5 callbacks suppressed [ 290.801739][ T2624] loop4: detected capacity change from 0 to 128 [ 290.839309][ T2634] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10456'. [ 290.848399][ T2634] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 290.864483][ T2639] netlink: 'syz.4.10457': attribute type 1 has an invalid length. [ 290.891747][ T2640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10458'. [ 290.989423][ T2634] batman_adv: batadv0: Removing interface: veth1_vlan [ 291.059936][ T2645] bond0: (slave vxcan1): The slave device specified does not support setting the MAC address [ 291.070190][ T2645] bond0: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 291.081224][ T2645] bond0: (slave vxcan1): making interface the new active one [ 291.138946][ T2645] bond0: (slave vxcan1): Enslaving as an active interface with an up link [ 291.234164][ T2735] netlink: 'syz.9.10479': attribute type 10 has an invalid length. [ 291.263265][ T2735] team0: Failed to send options change via netlink (err -105) [ 291.270863][ T2735] team0: Port device dummy0 added [ 291.348611][ T2750] netlink: 'syz.4.10495': attribute type 10 has an invalid length. [ 291.358461][ T2750] .`: (slave dummy0): Releasing backup interface [ 291.366799][ T2753] loop9: detected capacity change from 0 to 512 [ 291.374232][ T2754] loop0: detected capacity change from 0 to 128 [ 291.381356][ T2753] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 291.395733][ T2753] EXT4-fs (loop9): 1 truncate cleaned up [ 291.412642][ T2759] netlink: 'syz.4.10495': attribute type 10 has an invalid length. [ 291.429109][ T2750] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 291.455668][ T2759] dummy0: left promiscuous mode [ 291.461572][ T2761] loop3: detected capacity change from 0 to 512 [ 291.475486][ T2761] EXT4-fs: dax option not supported [ 291.538745][ T5079] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.559537][ T5079] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.578065][ T5079] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.586551][ T5079] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.608553][ T2793] vxlan0: entered promiscuous mode [ 291.625823][ T5079] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.637212][ T5079] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.664076][ T5079] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.675585][ T5079] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 291.698600][ T2804] loop1: detected capacity change from 0 to 128 [ 291.821678][ T2810] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.828776][ T2810] bridge0: port 2(bridge_slave_1) entered listening state [ 291.836024][ T2810] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.843103][ T2810] bridge0: port 1(bridge_slave_0) entered listening state [ 291.872192][ T2831] loop1: detected capacity change from 0 to 512 [ 291.879214][ T2831] EXT4-fs: Ignoring removed bh option [ 291.885020][ T2831] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 291.901631][ T2831] EXT4-fs (loop1): 1 truncate cleaned up [ 291.932019][ T2810] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 291.977225][ T2873] ip6gre0: left promiscuous mode [ 291.983389][ T2873] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 291.993304][ T2873] veth2: left promiscuous mode [ 291.998130][ T2873] veth2: left allmulticast mode [ 292.006451][ T5079] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.025569][ T5079] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.051430][ T5079] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.060259][ T5079] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 292.084857][ T2883] loop0: detected capacity change from 0 to 128 [ 292.202037][ T2900] loop0: detected capacity change from 0 to 512 [ 292.209293][ T2900] EXT4-fs: Ignoring removed bh option [ 292.214979][ T2900] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 292.227374][ T2900] EXT4-fs (loop0): 1 truncate cleaned up [ 292.265673][ T2911] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 292.308600][ T2921] loop4: detected capacity change from 0 to 512 [ 292.316021][ T2923] loop0: detected capacity change from 0 to 128 [ 292.325837][ T2921] EXT4-fs: Ignoring removed bh option [ 292.331986][ T2921] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 292.341806][ T2921] EXT4-fs (loop4): 1 truncate cleaned up [ 292.621407][ T2963] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 292.656010][ T2963] EXT4-fs (loop3): 1 truncate cleaned up [ 292.675869][ T2973] EXT4-fs (loop0): 1 orphan inode deleted [ 292.693813][ T410] EXT4-fs error (device loop0): ext4_release_dquot:7022: comm kworker/u8:7: Failed to release dquot type 1 [ 292.890209][ T3003] loop9: p1 p3 [ 292.895210][ T3003] loop9: p3 start 8388352 is beyond EOD, truncated [ 293.155471][ T3056] dummy0: entered promiscuous mode [ 293.177834][ T3056] team0: Port device dummy0 removed [ 293.189857][ T3056] bridge0: port 1(dummy0) entered blocking state [ 293.196240][ T3056] bridge0: port 1(dummy0) entered disabled state [ 293.232022][ T3056] dummy0: entered allmulticast mode [ 293.254522][ T3062] dummy0: left allmulticast mode [ 293.259583][ T3062] dummy0: left promiscuous mode [ 293.264841][ T3062] bridge0: port 1(dummy0) entered disabled state [ 293.309346][ T3062] team0: Port device dummy0 added [ 293.314980][ T3073] __nla_validate_parse: 10 callbacks suppressed [ 293.314996][ T3073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10576'. [ 293.330415][ T3073] netlink: 196 bytes leftover after parsing attributes in process `syz.1.10576'. [ 293.342816][ T3073] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10576'. [ 293.352640][ T3073] netlink: 196 bytes leftover after parsing attributes in process `syz.1.10576'. [ 293.402843][ T5098] Bluetooth: hci0: Frame reassembly failed (-84) [ 293.432516][ T3083] syz_tun: left promiscuous mode [ 293.446622][ T3083] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.453912][ T3083] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.518844][ T3083] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.529245][ T3083] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.553110][ T3064] loop0: p1 p3 < > [ 293.595035][ T5059] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.619600][ T5059] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.633224][ T5059] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.647366][ T5059] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.797639][ T3127] ip6gre2: entered promiscuous mode [ 294.001664][ T3143] SELinux: failed to load policy [ 294.035467][ T3149] validate_nla: 10 callbacks suppressed [ 294.035484][ T3149] netlink: 'syz.0.10598': attribute type 27 has an invalid length. [ 294.054128][ T3151] EXT4-fs: Ignoring removed bh option [ 294.060635][ T3151] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 294.072470][ T3151] EXT4-fs (loop4): 1 truncate cleaned up [ 294.095926][ T3149] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.103051][ T3149] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.126555][ T3149] 0ªX¹¦À: left allmulticast mode [ 294.166936][ T3149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.177122][ T3149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.220319][ T3149] xfrm1: left promiscuous mode [ 294.225145][ T3149] xfrm1: left allmulticast mode [ 294.231055][ T3149] vxlan1: left promiscuous mode [ 294.237211][ T5079] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.246122][ T5079] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.279774][ T5079] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.288779][ T5079] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.311529][ T5079] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.320465][ T5079] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.329811][ T5079] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 294.338768][ T5079] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.479013][ T3196] SELinux: failed to load policy [ 294.546070][ T3213] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 294.546070][ T3213] program syz.4.10624 not setting count and/or reply_len properly [ 294.568414][ T3207] loop0: p1 p3 [ 294.575140][ T3207] loop0: p3 start 8388352 is beyond EOD, truncated [ 294.631838][ T3223] netlink: 'syz.1.10627': attribute type 10 has an invalid length. [ 294.639905][ T3223] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10627'. [ 294.672494][ T3223] dummy0: entered promiscuous mode [ 294.686638][ T3233] netlink: 'syz.1.10627': attribute type 10 has an invalid length. [ 294.701063][ T3223] bridge0: port 3(dummy0) entered blocking state [ 294.707537][ T3223] bridge0: port 3(dummy0) entered disabled state [ 294.717229][ T3223] dummy0: entered allmulticast mode [ 294.741365][ T3232] bond1: entered promiscuous mode [ 294.748832][ T3233] dummy0: left allmulticast mode [ 294.764286][ T3233] dummy0: left promiscuous mode [ 294.769387][ T3233] bridge0: port 3(dummy0) entered disabled state [ 294.880693][ T3274] SELinux: failed to load policy [ 294.912789][ T3221] Set syz1 is full, maxelem 65536 reached [ 294.954822][ T3278] EXT4-fs (loop1): stripe (32769) is not aligned with cluster size (16), stripe is disabled [ 294.979956][ T3283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10638'. [ 294.996152][ T3278] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: comm syz.1.10636: inode #48: comm syz.1.10636: iget: illegal inode # [ 295.011107][ T3278] EXT4-fs (loop1): Remounting filesystem read-only [ 295.017822][ T3278] EXT4-fs warning (device loop1): ext4_xattr_block_set:2199: inode #19: comm syz.1.10636: dec ref error=-30 [ 295.170365][ T3322] netlink: 28 bytes leftover after parsing attributes in process `syz.9.10645'. [ 295.331965][ T29] kauditd_printk_skb: 350 callbacks suppressed [ 295.332055][ T29] audit: type=1400 audit(534.780:15683): avc: denied { bind } for pid=3356 comm="syz.9.10652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 295.357277][ T29] audit: type=1400 audit(534.780:15684): avc: denied { name_bind } for pid=3356 comm="syz.9.10652" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 295.378672][ T29] audit: type=1400 audit(534.780:15685): avc: denied { node_bind } for pid=3356 comm="syz.9.10652" saddr=::1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 295.439733][ T3332] chnl_net:caif_netlink_parms(): no params data found [ 295.485983][ T3332] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.493109][ T3332] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.500694][ T3332] bridge_slave_0: entered allmulticast mode [ 295.507496][ T3332] bridge_slave_0: entered promiscuous mode [ 295.514137][ T3332] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.521344][ T3332] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.529192][ T3332] bridge_slave_1: entered allmulticast mode [ 295.536218][ T3332] bridge_slave_1: entered promiscuous mode [ 295.545834][ T29] audit: type=1400 audit(534.986:15686): avc: denied { read } for pid=3532 comm="syz.9.10656" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 295.568450][ T29] audit: type=1400 audit(534.986:15687): avc: denied { open } for pid=3532 comm="syz.9.10656" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 295.591558][ T6542] Bluetooth: hci0: command 0x1003 tx timeout [ 295.592489][ T7217] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 295.617734][ T3332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.631765][ T3332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.661501][T32135] bridge_slave_1: left allmulticast mode [ 295.667268][T32135] bridge_slave_1: left promiscuous mode [ 295.669252][ T3577] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 295.673109][T32135] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.683135][ T3577] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 295.700669][ T3577] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 295.716968][ T3577] JBD2: no valid journal superblock found [ 295.722768][ T3577] EXT4-fs (loop9): Could not load journal inode [ 295.731579][T32135] bridge_slave_0: left allmulticast mode [ 295.737339][T32135] bridge_slave_0: left promiscuous mode [ 295.743026][T32135] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.781652][ T3595] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10659'. [ 295.794397][ T3595] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 295.821183][T32135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 295.830697][T32135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 295.839780][T32135] bond0 (unregistering): Released all slaves [ 295.848841][T32135] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 295.857427][T32135] bond1 (unregistering): Released all slaves [ 295.879871][ T3599] netlink: 'syz.0.10662': attribute type 12 has an invalid length. [ 295.887842][ T3599] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10662'. [ 295.905148][ T3332] team0: Port device team_slave_0 added [ 295.912021][ T3332] team0: Port device team_slave_1 added [ 295.944504][T32135] hsr_slave_0: left promiscuous mode [ 295.950170][T32135] hsr_slave_1: left promiscuous mode [ 295.955798][T32135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.963716][T32135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.034490][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.041513][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.067614][ T3332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.078495][ T3656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10667'. [ 296.098654][ T29] audit: type=1400 audit(535.500:15688): avc: denied { read } for pid=3658 comm="syz.0.10668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 296.140203][ T3332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.147185][ T3332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.173137][ T3332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.243193][ T3332] hsr_slave_0: entered promiscuous mode [ 296.249067][ T29] audit: type=1326 audit(535.631:15689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3702 comm="syz.9.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 296.272133][ T29] audit: type=1326 audit(535.631:15690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3702 comm="syz.9.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 296.298991][ T3332] hsr_slave_1: entered promiscuous mode [ 296.306380][ T3332] debugfs: 'hsr0' already exists in 'hsr' [ 296.312169][ T3332] Cannot create hsr debugfs directory [ 296.325103][ T29] audit: type=1326 audit(535.687:15691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3702 comm="syz.9.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 296.348173][ T29] audit: type=1326 audit(535.687:15692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3702 comm="syz.9.10673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f275c3af749 code=0x7ffc0000 [ 296.486222][T32135] IPVS: stop unused estimator thread 0... [ 296.559074][ T3332] team0: Port device netdevsim1 removed [ 296.643986][ T3810] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 296.717478][ T3332] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 296.747202][ T3332] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 296.796351][ T3332] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 296.833925][ T3332] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 296.983724][ T3804] Set syz1 is full, maxelem 65536 reached [ 296.996268][ T3332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.050497][ T3332] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.064415][ T3845] set_capacity_and_notify: 9 callbacks suppressed [ 297.064433][ T3845] loop3: detected capacity change from 0 to 2048 [ 297.085863][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.093093][ T410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.117018][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.124094][ T410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.317503][ T3332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.373586][ T3862] loop9: detected capacity change from 0 to 32768 [ 297.416711][ T3332] veth0_vlan: entered promiscuous mode [ 297.422799][ T3862] loop9: p1 p3 < > [ 297.427689][ T3332] veth1_vlan: entered promiscuous mode [ 297.449685][ T3332] veth0_macvtap: entered promiscuous mode [ 297.458027][ T3332] veth1_macvtap: entered promiscuous mode [ 297.470778][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.483957][ T3919] rdma_op ffff88815861a180 conn xmit_rdma 0000000000000000 [ 297.484301][ T3332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.520044][ T5092] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.550891][ T5092] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.572549][ T5092] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.599836][ T5092] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.659296][ T3942] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 297.659296][ T3942] program syz.9.10719 not setting count and/or reply_len properly [ 298.632437][ T4047] netlink: 'syz.3.10762': attribute type 7 has an invalid length. [ 298.640652][ T4047] netlink: 'syz.3.10762': attribute type 7 has an invalid length. [ 298.673755][ T4049] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 298.809337][ T4059] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.10766' sets config #0 [ 298.956475][ T4070] loop3: detected capacity change from 0 to 1024 [ 299.037456][ T4081] smc: net device bond0 applied user defined pnetid SYZ0 [ 299.045871][ T4081] smc: net device bond0 erased user defined pnetid SYZ0 [ 299.369532][ T4117] __nla_validate_parse: 6 callbacks suppressed [ 299.369549][ T4117] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10789'. [ 299.387205][ T4117] netlink: 9 bytes leftover after parsing attributes in process `syz.0.10789'. [ 299.458366][ T4123] SELinux: ebitmap: truncated map [ 299.471519][ T4123] SELinux: failed to load policy [ 299.490965][ T4129] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10796'. [ 299.524790][ T5128] Bluetooth: hci0: Frame reassembly failed (-84) [ 299.629491][ T5043] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.639990][ T5043] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.691803][ T5043] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.702124][ T5043] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.755758][ T5043] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.766136][ T5043] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.840369][ T5043] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 299.850856][ T5043] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.033099][ T5043] bond0 (unregistering): Released all slaves [ 300.077060][ T5043] hsr_slave_0: left promiscuous mode [ 300.082912][ T5043] hsr_slave_1: left promiscuous mode [ 300.093283][ T5043] veth1_macvtap: left promiscuous mode [ 300.099045][ T5043] veth0_macvtap: left promiscuous mode [ 300.184239][ T5043] team0 (unregistering): Port device dummy0 removed [ 300.419405][ T5043] IPVS: stop unused estimator thread 0... [ 300.681984][ T4169] chnl_net:caif_netlink_parms(): no params data found [ 300.691510][ T4167] loop3: detected capacity change from 0 to 32768 [ 300.732031][ T4169] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.739164][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.755132][ T4169] bridge_slave_0: entered allmulticast mode [ 300.761766][ T4169] bridge_slave_0: entered promiscuous mode [ 300.769449][ T4167] loop3: p1 p3 < > [ 300.774363][ T4169] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.781476][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.793554][ T4169] bridge_slave_1: entered allmulticast mode [ 300.800179][ T4169] bridge_slave_1: entered promiscuous mode [ 300.821262][ T4169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.830717][ T4346] netlink: 64 bytes leftover after parsing attributes in process `syz.2.10809'. [ 300.862606][ T4169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.917397][ T4169] team0: Port device team_slave_0 added [ 300.926692][ T4169] team0: Port device team_slave_1 added [ 300.941459][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 300.941471][ T29] audit: type=1400 audit(540.037:15811): avc: denied { read write } for pid=4401 comm="syz.3.10810" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 300.970550][ T29] audit: type=1400 audit(540.037:15812): avc: denied { open } for pid=4401 comm="syz.3.10810" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 300.993681][ T29] audit: type=1400 audit(540.046:15813): avc: denied { ioctl } for pid=4401 comm="syz.3.10810" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 301.030672][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.037686][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.063683][ T4169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.263504][ T4169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.270647][ T4169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.296690][ T4169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.329007][ T4169] hsr_slave_0: entered promiscuous mode [ 301.335027][ T4169] hsr_slave_1: entered promiscuous mode [ 301.348473][ T4169] debugfs: 'hsr0' already exists in 'hsr' [ 301.354226][ T4169] Cannot create hsr debugfs directory [ 301.419276][ T29] audit: type=1400 audit(540.477:15814): avc: denied { mounton } for pid=4522 comm="syz.2.10821" path="/8/file0" dev="tmpfs" ino=59 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 301.458328][ T4552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10825'. [ 301.482353][ T4552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.505170][ T4552] bond1: (slave batadv1): Opening slave failed [ 301.645572][ T29] audit: type=1400 audit(540.692:15815): avc: denied { write } for pid=4608 comm="syz.2.10831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.684023][ T29] audit: type=1400 audit(540.729:15816): avc: denied { ioctl } for pid=4612 comm="syz.0.10833" path="socket:[91643]" dev="sockfs" ino=91643 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 301.730744][ T6542] Bluetooth: hci0: command 0x1003 tx timeout [ 301.730985][ T7217] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 301.767296][ T4169] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 301.780099][ T4169] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 301.791946][ T4169] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 301.804263][ T4169] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 301.821033][ T4649] loop3: detected capacity change from 0 to 512 [ 301.828872][ T4649] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 301.838917][ T4649] EXT4-fs (loop3): invalid journal inode [ 301.844608][ T4649] EXT4-fs (loop3): can't get journal size [ 301.853035][ T4649] EXT4-fs (loop3): 1 truncate cleaned up [ 301.875383][ T4169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.889754][ T4169] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.893828][ T4664] loop3: detected capacity change from 0 to 128 [ 301.906985][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.914147][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.923022][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.930299][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.938330][ T4664] EXT4-fs (loop3): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 301.967767][ T4671] tipc: Enabling of bearer rejected, failed to enable media [ 302.018307][ T29] audit: type=1400 audit(541.038:15817): avc: denied { lock } for pid=4678 comm="syz.3.10844" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=91705 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.048524][ T4169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 302.072836][ T29] audit: type=1400 audit(541.085:15818): avc: denied { create } for pid=4681 comm="syz.2.10845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 302.091922][ T29] audit: type=1400 audit(541.085:15819): avc: denied { bind } for pid=4681 comm="syz.2.10845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 302.180203][ T4701] netlink: 'syz.2.10851': attribute type 27 has an invalid length. [ 302.225124][ T4701] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.232378][ T4701] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.272583][ T4701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.282350][ T4701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.331344][ T4707] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10853'. [ 302.365495][ T4716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10856'. [ 302.394734][ T4708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.402626][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.412390][ T4708] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 302.440338][ T175] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.457469][ T4169] veth0_vlan: entered promiscuous mode [ 302.460549][ T29] audit: type=1326 audit(541.450:15820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4720 comm="syz.3.10859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6108e0f749 code=0x7ffc0000 [ 302.494033][ T5128] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.504490][ T4169] veth1_vlan: entered promiscuous mode [ 302.520717][ T5128] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.545999][ T4169] veth0_macvtap: entered promiscuous mode [ 302.552621][ T5128] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.563395][ T4169] veth1_macvtap: entered promiscuous mode [ 302.576726][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.586666][ T4735] SET target dimension over the limit! [ 302.594691][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.605756][ T5128] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.624956][ T5128] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.641906][ T5128] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.672948][ T5128] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.688867][ T4763] lo speed is unknown, defaulting to 1000 [ 302.698336][ T4763] lo speed is unknown, defaulting to 1000 [ 302.704403][ T4763] lo speed is unknown, defaulting to 1000 [ 302.711346][ T4763] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 302.722330][ T4763] lo speed is unknown, defaulting to 1000 [ 302.728958][ T4763] lo speed is unknown, defaulting to 1000 [ 302.735000][ T4763] lo speed is unknown, defaulting to 1000 [ 302.752407][ T4763] lo speed is unknown, defaulting to 1000 [ 302.761043][ T4763] lo speed is unknown, defaulting to 1000 [ 302.767221][ T4763] lo speed is unknown, defaulting to 1000 [ 302.776349][ T4763] lo speed is unknown, defaulting to 1000 [ 302.865072][ T8283] hid_parser_main: 30 callbacks suppressed [ 302.865089][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.878411][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.885827][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.893895][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.901445][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.909033][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.916402][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.923830][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.931386][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.938808][ T8283] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 302.948686][ T8283] hid-generic 0000:0000:0000.000F: hidraw0: HID v8.00 Device [syz0] on syz0 [ 303.263131][ T4850] loop3: detected capacity change from 0 to 1024 [ 303.282648][ T4850] EXT4-fs mount: 76 callbacks suppressed [ 303.282727][ T4850] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 303.703940][ T5043] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: comm kworker/u8:17: lblock 0 mapped to illegal pblock 0 (length 6) [ 303.717963][ T5043] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 303.730323][ T5043] EXT4-fs (loop3): This should not happen!! Data will be lost [ 303.730323][ T5043] [ 303.741386][ T4919] SELinux: failed to load policy [ 303.749326][ T37] EXT4-fs error (device loop3): ext4_map_blocks:825: inode #15: block 8: comm kworker/u8:2: lblock 8 mapped to illegal pblock 8 (length 8) [ 303.765105][ T37] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 303.777455][ T37] EXT4-fs (loop3): This should not happen!! Data will be lost [ 303.777455][ T37] [ 303.920311][ T4934] loop9: detected capacity change from 0 to 512 [ 303.929180][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 303.952433][ T4934] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 304.048655][ T4956] xt_hashlimit: max too large, truncated to 1048576 [ 304.117020][ T4169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.141306][ T4967] lo speed is unknown, defaulting to 1000 [ 304.321302][ T5016] loop9: detected capacity change from 0 to 256 [ 304.340038][ T5016] FAT-fs (loop9): Directory bread(block 64) failed [ 304.346745][ T5016] FAT-fs (loop9): Directory bread(block 65) failed [ 304.354196][ T5016] FAT-fs (loop9): Directory bread(block 66) failed [ 304.361076][ T5016] FAT-fs (loop9): Directory bread(block 67) failed [ 304.367683][ T5016] FAT-fs (loop9): Directory bread(block 68) failed [ 304.374277][ T5016] FAT-fs (loop9): Directory bread(block 69) failed [ 304.380781][ T5016] FAT-fs (loop9): Directory bread(block 70) failed [ 304.387547][ T5016] FAT-fs (loop9): Directory bread(block 71) failed [ 304.394161][ T5016] FAT-fs (loop9): Directory bread(block 72) failed [ 304.400710][ T5016] FAT-fs (loop9): Directory bread(block 73) failed [ 304.419515][ T5016] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 304.428150][ T5016] FAT-fs (loop9): Filesystem has been set read-only [ 304.434777][ T5016] syz.9.10936: attempt to access beyond end of device [ 304.434777][ T5016] loop9: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 304.448806][ T5016] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 304.457604][ T5016] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 899) [ 304.466387][ T5016] syz.9.10936: attempt to access beyond end of device [ 304.466387][ T5016] loop9: rw=8388608, sector=1736, nr_sectors = 8 limit=256 [ 304.507867][ T5026] tipc: Started in network mode [ 304.512768][ T5026] tipc: Node identity 2de6000000000000002e, cluster identity 4711 [ 304.833811][ T5050] program syz.2.10940 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 305.078537][ T5084] lo speed is unknown, defaulting to 1000 [ 305.147499][ T5084] cgroup: fork rejected by pids controller in /syz0 [ 305.187403][ T5142] netlink: 'syz.2.10950': attribute type 12 has an invalid length. [ 305.195351][ T5142] netlink: 'syz.2.10950': attribute type 1 has an invalid length. [ 305.203168][ T5142] netlink: 'syz.2.10950': attribute type 2 has an invalid length. [ 305.228873][ T5146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10953'. [ 305.276495][ T5146] 8021q: adding VLAN 0 to HW filter on device bond2 [ 305.337517][ T5146] bond2: (slave batadv1): Opening slave failed [ 305.493019][ T5196] loop4: detected capacity change from 0 to 512 [ 305.512382][ T5196] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 305.532526][ T5200] lo speed is unknown, defaulting to 1000 [ 305.601176][ T5196] EXT4-fs (loop4): mount failed [ 305.787894][T32135] bridge_slave_1: left allmulticast mode [ 305.793655][T32135] bridge_slave_1: left promiscuous mode [ 305.799381][T32135] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.807610][T32135] bridge_slave_0: left allmulticast mode [ 305.813361][T32135] bridge_slave_0: left promiscuous mode [ 305.819108][T32135] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.912939][ T5294] loop9: detected capacity change from 0 to 164 [ 305.924807][ T5294] Unsupported NM flag settings (240) [ 305.934410][T32135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.958041][T32135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.967735][T32135] bond0 (unregistering): Released all slaves [ 305.989993][ T5228] lo speed is unknown, defaulting to 1000 [ 306.055352][ T5315] loop2: detected capacity change from 0 to 1024 [ 306.079313][ T5315] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 306.090298][ T5315] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 306.108931][ T5315] JBD2: no valid journal superblock found [ 306.114795][ T5315] EXT4-fs (loop2): Could not load journal inode [ 306.124946][T32135] hsr_slave_0: left promiscuous mode [ 306.130853][T32135] hsr_slave_1: left promiscuous mode [ 306.140496][T32135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.148890][ T5315] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 306.159246][T32135] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.197724][T32135] team0 (unregistering): Port device team_slave_1 removed [ 306.207784][T32135] team0 (unregistering): Port device C removed [ 306.259364][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 306.312869][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.320094][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.327912][ T5228] bridge_slave_0: entered allmulticast mode [ 306.334457][ T5228] bridge_slave_0: entered promiscuous mode [ 306.341424][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.348480][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.356232][ T5228] bridge_slave_1: entered allmulticast mode [ 306.362931][ T5228] bridge_slave_1: entered promiscuous mode [ 306.382468][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 306.382483][ T29] audit: type=1400 audit(289.064:16014): avc: denied { create } for pid=5476 comm="syz.3.10985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.415978][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.425695][ T29] audit: type=1400 audit(289.102:16015): avc: denied { write } for pid=5476 comm="syz.3.10985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 306.447449][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.456698][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10984'. [ 306.479323][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10984'. [ 306.488964][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10986'. [ 306.498025][ T5506] netlink: 'syz.3.10986': attribute type 7 has an invalid length. [ 306.508427][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10984'. [ 306.522091][ T5506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10986'. [ 306.523519][ T5228] team0: Port device team_slave_0 added [ 306.531078][ T5506] netlink: 'syz.3.10986': attribute type 7 has an invalid length. [ 306.544641][ T5478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10984'. [ 306.553669][ T175] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.564543][ T5228] team0: Port device team_slave_1 added [ 306.586914][ T175] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.598236][T32135] IPVS: stop unused estimator thread 0... [ 306.606101][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.613100][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.639089][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.651068][ T175] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.662798][ T175] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 306.673703][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.680736][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.707006][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.730905][ T29] audit: type=1400 audit(289.382:16016): avc: denied { write } for pid=5553 comm="syz.3.10989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 306.791322][ T5560] loop9: detected capacity change from 0 to 128 [ 306.798215][ T29] audit: type=1400 audit(289.401:16017): avc: denied { nlmsg_write } for pid=5553 comm="syz.3.10989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 306.836251][ T29] audit: type=1400 audit(289.485:16018): avc: denied { mount } for pid=5557 comm="syz.9.10993" name="/" dev="loop9" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 306.861713][ T5560] syz.9.10993: attempt to access beyond end of device [ 306.861713][ T5560] loop9: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 306.893793][ T5560] syz.9.10993: attempt to access beyond end of device [ 306.893793][ T5560] loop9: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 306.909213][ T29] audit: type=1400 audit(289.523:16019): avc: denied { read } for pid=5574 comm="syz.2.10995" dev="nsfs" ino=4026532368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 306.930033][ T29] audit: type=1400 audit(289.523:16020): avc: denied { open } for pid=5574 comm="syz.2.10995" path="net:[4026532368]" dev="nsfs" ino=4026532368 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 306.956402][ T5228] hsr_slave_0: entered promiscuous mode [ 306.962522][ T5560] syz.9.10993: attempt to access beyond end of device [ 306.962522][ T5560] loop9: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 306.976325][ T5560] buffer_io_error: 18 callbacks suppressed [ 306.976337][ T5560] Buffer I/O error on dev loop9, logical block 75, lost async page write [ 306.991672][ T5228] hsr_slave_1: entered promiscuous mode [ 307.009190][ T5560] syz.9.10993: attempt to access beyond end of device [ 307.009190][ T5560] loop9: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 307.023164][ T5560] Buffer I/O error on dev loop9, logical block 76, lost async page write [ 307.037220][ T5560] syz.9.10993: attempt to access beyond end of device [ 307.037220][ T5560] loop9: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 307.054951][ T29] audit: type=1400 audit(289.691:16021): avc: denied { write } for pid=5611 comm="syz.2.10997" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.063074][ T5560] syz.9.10993: attempt to access beyond end of device [ 307.063074][ T5560] loop9: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 307.078251][ T29] audit: type=1400 audit(289.691:16022): avc: denied { open } for pid=5611 comm="syz.2.10997" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 307.092162][ T5560] Buffer I/O error on dev loop9, logical block 87, lost async page write [ 307.138104][ T5560] syz.9.10993: attempt to access beyond end of device [ 307.138104][ T5560] loop9: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 307.151895][ T5560] Buffer I/O error on dev loop9, logical block 88, lost async page write [ 307.223221][ T29] audit: type=1400 audit(289.803:16023): avc: denied { mount } for pid=5636 comm="syz.2.10998" name="/" dev="configfs" ino=1371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 307.229001][ T5560] syz.9.10993: attempt to access beyond end of device [ 307.229001][ T5560] loop9: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 307.271088][ T5672] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11002'. [ 307.286172][ T5560] Buffer I/O error on dev loop9, logical block 91, lost async page write [ 307.294839][ T5560] Buffer I/O error on dev loop9, logical block 92, lost async page write [ 307.304258][ T5560] Buffer I/O error on dev loop9, logical block 103, lost async page write [ 307.326194][ T5560] Buffer I/O error on dev loop9, logical block 104, lost async page write [ 307.337040][ T5685] loop2: detected capacity change from 0 to 512 [ 307.343728][ T5685] EXT4-fs: Ignoring removed oldalloc option [ 307.365129][ T5685] EXT4-fs (loop2): 1 truncate cleaned up [ 307.371303][ T5685] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 307.389135][ T5560] Buffer I/O error on dev loop9, logical block 107, lost async page write [ 307.397857][ T5560] Buffer I/O error on dev loop9, logical block 108, lost async page write [ 307.448764][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.481249][ T5710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11008'. [ 307.530829][ T5228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.542061][ T5228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.553197][ T5228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.562050][ T5228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 307.601511][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.627927][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.648888][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.656088][ T5051] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.664414][ T5748] SELinux: Context system_u:object_r:var_auth_t:s0 is not valid (left unmapped). [ 307.678800][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.685880][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.776093][ T5757] loop2: detected capacity change from 0 to 512 [ 307.804243][ T5757] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 307.826039][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.839706][ T5757] EXT4-fs (loop2): 1 truncate cleaned up [ 307.863723][ T5771] netlink: 104 bytes leftover after parsing attributes in process `syz.9.11020'. [ 307.884655][ T5757] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 307.962759][ T5784] netlink: 'syz.4.11022': attribute type 6 has an invalid length. [ 307.978608][ T5228] veth0_vlan: entered promiscuous mode [ 307.995886][ T5228] veth1_vlan: entered promiscuous mode [ 308.017265][ T5101] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.017285][ T5784] netlink: 'syz.4.11022': attribute type 6 has an invalid length. [ 308.062909][ T5101] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.071996][ T5228] veth0_macvtap: entered promiscuous mode [ 308.089373][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.093522][ T5228] veth1_macvtap: entered promiscuous mode [ 308.114362][ T5101] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.134561][ T5805] netlink: 'syz.2.11027': attribute type 7 has an invalid length. [ 308.143507][ T5101] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.151790][ T5802] loop4: detected capacity change from 0 to 512 [ 308.162231][ T5805] netlink: 'syz.2.11027': attribute type 7 has an invalid length. [ 308.167885][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.188350][ T5101] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.197213][ T5101] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.211757][ T5101] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.221834][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.229830][ T5802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.245972][ T5101] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.268595][ T5101] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.277766][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.292074][ T5101] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.332768][ T5101] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.365972][ T5829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 308.379021][ T5832] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 308.381082][ T5101] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.396158][ T5829] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 308.413053][ T5829] Symlink component flag not implemented [ 308.418727][ T5829] Symlink component flag not implemented [ 308.429154][ T5829] Symlink component flag not implemented (7) [ 308.435236][ T5829] Symlink component flag not implemented (116) [ 308.458366][ T5834] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.511100][ T5838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 308.554842][ T5852] Unsupported NM flag settings (240) [ 308.576767][ T5854] program syz.0.11041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 308.590954][ T3313] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.712915][ T5871] set_capacity_and_notify: 4 callbacks suppressed [ 308.712931][ T5871] loop9: detected capacity change from 0 to 512 [ 308.718246][ T5873] loop0: detected capacity change from 0 to 512 [ 308.723927][ T5871] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 308.740334][ T5873] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.764414][ T5871] EXT4-fs (loop9): 1 truncate cleaned up [ 308.783351][ T5871] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 308.820376][ T5873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.932010][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.970808][ T5898] loop4: detected capacity change from 0 to 164 [ 308.993496][ T5898] Unsupported NM flag settings (240) [ 309.053487][ T4169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.136314][ T5926] netlink: 'syz.9.11063': attribute type 6 has an invalid length. [ 309.155961][ T5051] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.164751][ T5926] netlink: 'syz.9.11063': attribute type 6 has an invalid length. [ 309.182401][ T5051] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.196973][ T5051] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.212074][ T5924] loop0: detected capacity change from 0 to 8192 [ 309.216478][ T5051] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.396413][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.411371][ T5937] loop9: detected capacity change from 0 to 512 [ 309.432236][ T5937] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 309.446869][ T5944] loop3: detected capacity change from 0 to 128 [ 309.672157][ T5957] loop3: detected capacity change from 0 to 512 [ 309.679146][ T5957] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 309.692561][ T5957] EXT4-fs (loop3): 1 truncate cleaned up [ 309.698897][ T5957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 309.812169][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 309.863785][ T5965] bridge0: entered allmulticast mode [ 310.147529][ T5984] loop2: detected capacity change from 0 to 4096 [ 310.156145][ T5984] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.188067][ T3332] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.247612][ T5995] loop4: detected capacity change from 0 to 128 [ 310.384542][ T5043] bio_check_eod: 72 callbacks suppressed [ 310.384557][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.384557][ T5043] loop4: rw=1, sector=145, nr_sectors = 8 limit=128 [ 310.410500][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.410500][ T5043] loop4: rw=1, sector=161, nr_sectors = 8 limit=128 [ 310.423984][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.423984][ T5043] loop4: rw=1, sector=177, nr_sectors = 8 limit=128 [ 310.438773][ T4169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.459627][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.459627][ T5043] loop4: rw=1, sector=193, nr_sectors = 8 limit=128 [ 310.476071][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.476071][ T5043] loop4: rw=1, sector=209, nr_sectors = 8 limit=128 [ 310.489751][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.489751][ T5043] loop4: rw=1, sector=225, nr_sectors = 8 limit=128 [ 310.503600][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.503600][ T5043] loop4: rw=1, sector=241, nr_sectors = 8 limit=128 [ 310.517209][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.517209][ T5043] loop4: rw=1, sector=257, nr_sectors = 8 limit=128 [ 310.534142][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.534142][ T5043] loop4: rw=1, sector=273, nr_sectors = 8 limit=128 [ 310.548610][ T5043] kworker/u8:17: attempt to access beyond end of device [ 310.548610][ T5043] loop4: rw=1, sector=289, nr_sectors = 8 limit=128 [ 310.654873][ T6033] loop0: detected capacity change from 0 to 4096 [ 310.669753][ T6033] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 310.696007][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.983044][ T6094] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.052684][ T5043] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 311.068436][ T5043] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 311.080892][ T5043] EXT4-fs (loop9): This should not happen!! Data will be lost [ 311.080892][ T5043] [ 311.090666][ T5043] EXT4-fs (loop9): Total free blocks count 0 [ 311.096751][ T5043] EXT4-fs (loop9): Free/Dirty block details [ 311.102638][ T5043] EXT4-fs (loop9): free_blocks=2415919104 [ 311.108424][ T5043] EXT4-fs (loop9): dirty_blocks=160 [ 311.113672][ T5043] EXT4-fs (loop9): Block reservation details [ 311.119774][ T5043] EXT4-fs (loop9): i_reserved_data_blocks=10 [ 311.141569][ T4169] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.172126][ T6126] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 311.192172][ T6126] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 311.221589][ T6126] Symlink component flag not implemented [ 311.227474][ T6126] Symlink component flag not implemented [ 311.241492][ T6126] Symlink component flag not implemented (7) [ 311.247537][ T6126] Symlink component flag not implemented (116) [ 311.273899][ T6137] __nla_validate_parse: 18 callbacks suppressed [ 311.273912][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11130'. [ 311.303013][ T6137] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11130'. [ 311.559310][ T6172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.599445][T32487] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.711119][ T6197] netlink: 'syz.2.11151': attribute type 4 has an invalid length. [ 311.738628][ T6197] netlink: 'syz.2.11151': attribute type 4 has an invalid length. [ 311.747204][ T29] kauditd_printk_skb: 310 callbacks suppressed [ 311.747220][ T29] audit: type=1400 audit(294.078:16334): avc: denied { mounton } for pid=6204 comm="syz.0.11154" path="/28/file0" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 311.830468][ T6216] netlink: 'syz.0.11158': attribute type 3 has an invalid length. [ 311.838425][ T6216] netlink: 'syz.0.11158': attribute type 1 has an invalid length. [ 311.846323][ T6216] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.11158'. [ 311.856436][ T29] audit: type=1400 audit(294.190:16335): avc: denied { unmount } for pid=32487 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 311.896673][ T29] audit: type=1400 audit(294.209:16336): avc: denied { read } for pid=6217 comm="syz.2.11159" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 311.919765][ T29] audit: type=1400 audit(294.209:16337): avc: denied { open } for pid=6217 comm="syz.2.11159" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 311.943099][ T29] audit: type=1400 audit(294.209:16338): avc: denied { ioctl } for pid=6217 comm="syz.2.11159" path="/dev/autofs" dev="devtmpfs" ino=91 ioctlcmd=0x9374 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 311.992133][ T29] audit: type=1400 audit(294.303:16339): avc: denied { write } for pid=6227 comm="syz.2.11163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 312.013486][ T29] audit: type=1400 audit(294.321:16340): avc: denied { name_bind } for pid=6229 comm="syz.3.11164" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 312.064572][ T29] audit: type=1400 audit(294.377:16341): avc: denied { create } for pid=6235 comm="syz.2.11167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.096055][ T29] audit: type=1400 audit(294.396:16342): avc: denied { connect } for pid=6235 comm="syz.2.11167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 312.162291][ T29] audit: type=1400 audit(294.434:16343): avc: denied { read } for pid=6238 comm="syz.3.11168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 312.235635][ T6260] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 312.314210][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11179'. [ 312.341822][ T6282] smc: net device bond0 applied user defined pnetid SYZ0 [ 312.349185][ T6282] smc: net device bond0 erased user defined pnetid SYZ0 [ 312.357149][ T6278] netlink: 312 bytes leftover after parsing attributes in process `syz.3.11179'. [ 312.366361][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11179'. [ 312.409912][ T6290] syzkaller1: entered promiscuous mode [ 312.415433][ T6290] syzkaller1: entered allmulticast mode [ 312.769040][ T6363] EXT4-fs error (device loop9): ext4_xattr_inode_iget:441: inode #18: comm syz.9.11213: iget: bad extra_isize 90 (inode size 256) [ 312.783090][ T6363] EXT4-fs (loop9): Remounting filesystem read-only [ 312.789734][ T6363] EXT4-fs warning (device loop9): ext4_evict_inode:273: xattr delete (err -30) [ 312.798845][ T6363] EXT4-fs (loop9): 1 orphan inode deleted [ 312.804995][ T6363] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.817665][ T6363] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.045488][ T6394] Alternate GPT is invalid, using primary GPT. [ 313.051923][ T6394] loop2: p1 p2 p3 [ 313.056008][ T6394] loop2: partition table partially beyond EOD, truncated [ 313.136682][ T6411] vhci_hcd vhci_hcd.4: invalid port number 236 [ 313.444474][ T6429] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11232'. [ 313.728176][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11244'. [ 313.766717][ T6456] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11244'. [ 314.031121][ T37] ================================================================== [ 314.039245][ T37] BUG: KCSAN: data-race in copy_folio_from_iter_atomic / fat16_ent_put [ 314.047518][ T37] [ 314.049860][ T37] write to 0xffff888185962cb6 of 2 bytes by task 6427 on cpu 1: [ 314.057498][ T37] fat16_ent_put+0x28/0x60 [ 314.061941][ T37] fat_alloc_clusters+0x4d1/0xa80 [ 314.066983][ T37] fat_get_block+0x258/0x5e0 [ 314.071588][ T37] __block_write_begin_int+0x400/0xf90 [ 314.077057][ T37] cont_write_begin+0x5ff/0x970 [ 314.081919][ T37] fat_write_begin+0x4f/0xe0 [ 314.086532][ T37] cont_write_begin+0x1b0/0x970 [ 314.091400][ T37] fat_write_begin+0x4f/0xe0 [ 314.096005][ T37] generic_cont_expand_simple+0xb0/0x150 [ 314.101650][ T37] fat_cont_expand+0x3e/0x170 [ 314.106339][ T37] fat_setattr+0x2a5/0x8a0 [ 314.110768][ T37] notify_change+0x872/0x8f0 [ 314.115372][ T37] do_ftruncate+0x335/0x3c0 [ 314.119878][ T37] __x64_sys_ftruncate+0x68/0xc0 [ 314.124821][ T37] x64_sys_call+0x2e35/0x3000 [ 314.129513][ T37] do_syscall_64+0xca/0x2b0 [ 314.134044][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.139950][ T37] [ 314.142278][ T37] read to 0xffff888185962c00 of 512 bytes by task 37 on cpu 0: [ 314.149820][ T37] copy_folio_from_iter_atomic+0x760/0x1150 [ 314.155725][ T37] generic_perform_write+0x2c2/0x490 [ 314.161028][ T37] shmem_file_write_iter+0xc5/0xf0 [ 314.166162][ T37] lo_rw_aio+0x673/0x720 [ 314.170432][ T37] loop_process_work+0x56d/0xaa0 [ 314.175369][ T37] loop_workfn+0x31/0x40 [ 314.179612][ T37] process_scheduled_works+0x4ce/0x9d0 [ 314.185077][ T37] worker_thread+0x582/0x770 [ 314.189674][ T37] kthread+0x489/0x510 [ 314.193764][ T37] ret_from_fork+0x149/0x290 [ 314.198372][ T37] ret_from_fork_asm+0x1a/0x30 [ 314.203155][ T37] [ 314.205483][ T37] Reported by Kernel Concurrency Sanitizer on: [ 314.211637][ T37] CPU: 0 UID: 0 PID: 37 Comm: kworker/u8:2 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 314.223020][ T37] Tainted: [W]=WARN [ 314.226831][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 314.236897][ T37] Workqueue: loop9 loop_workfn [ 314.241678][ T37] ================================================================== [ 314.394271][ T6481] set_capacity_and_notify: 8 callbacks suppressed [ 314.394289][ T6481] loop0: detected capacity change from 0 to 2048 [ 314.421685][ T6481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.619127][ T37] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 314.634452][ T37] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 160 with error 28 [ 314.647166][ T37] EXT4-fs (loop0): This should not happen!! Data will be lost [ 314.647166][ T37] [ 314.656845][ T37] EXT4-fs (loop0): Total free blocks count 0 [ 314.662840][ T37] EXT4-fs (loop0): Free/Dirty block details [ 314.668744][ T37] EXT4-fs (loop0): free_blocks=2415919104 [ 314.674527][ T37] EXT4-fs (loop0): dirty_blocks=160 [ 314.679755][ T37] EXT4-fs (loop0): Block reservation details [ 314.685808][ T37] EXT4-fs (loop0): i_reserved_data_blocks=10 [ 314.693563][ T5228] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.