last executing test programs: 44.770110079s ago: executing program 3 (id=671): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x1, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000b40)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x80000}, 0x18) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 44.51663564s ago: executing program 3 (id=680): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',version=9p2000']) 44.273414631s ago: executing program 3 (id=684): socket(0x10, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x38) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) flock(r2, 0x2) 43.282887904s ago: executing program 3 (id=691): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000003c0)={[{@errors_continue}, {@data_err_abort}, {@noinit_itable}, {@dioread_lock}, {@noquota}, {@resgid}, {@data_err_ignore}, {@nodiscard}, {@nobh}, {@nojournal_checksum}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x56b, &(0x7f0000000b00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0/file0'}, 0x11) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) read(r1, &(0x7f0000000000), 0x20f1) 42.937576028s ago: executing program 3 (id=694): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 42.18869534s ago: executing program 3 (id=710): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}}, 0x2404c840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x101, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0x5, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0xffb9, 0x4004044) 42.178569011s ago: executing program 32 (id=710): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}}, 0x2404c840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x101, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0x5, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0xffb9, 0x4004044) 2.361898468s ago: executing program 5 (id=1602): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x9, @mcast1, 0x1000}}}, 0x84) 2.298325551s ago: executing program 4 (id=1604): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000500)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r3, 0x0, 0x800000000006}, 0x18) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0xfffffffc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) r4 = dup3(r1, r0, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1.814355702s ago: executing program 2 (id=1624): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000004000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x29, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d0b}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x9}, 0x100040, 0xc8, 0x40000000, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0xffffffffffffffff, 0xfffffffffffffffe, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) 1.763767994s ago: executing program 2 (id=1625): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1.763317385s ago: executing program 2 (id=1626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6ad40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000180)=r2) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.597408821s ago: executing program 2 (id=1627): pipe(0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x32e, &(0x7f00000004c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000340)={@desc={0x1, 0x0, @desc2}}) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) write(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000540)='./file0\x00', 0x204818, &(0x7f0000000b00)={[{@map_off}, {@check_strict}, {@hide}, {@map_off}, {@unhide}, {@nojoliet}, {@check_relaxed}, {@map_normal}]}, 0x1, 0x54e, &(0x7f0000000580)="$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") 1.596703001s ago: executing program 2 (id=1638): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000004000), &(0x7f00000003c0)}, 0x20) 1.481172646s ago: executing program 5 (id=1629): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x20300}}}}}}]}, 0x48}}, 0x4040004) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101}, 0x14}}, 0x40) 1.479679006s ago: executing program 0 (id=1640): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r2, &(0x7f00000004c0)="b0", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x9, @mcast1, 0x1000}}}, 0x84) 630.524493ms ago: executing program 0 (id=1630): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {}, {0xd, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x18, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}}}]}]}]}}]}, 0x48}}, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x0, 0x14, 0x0, 0xfe, 0x4, 0xff, 0x6}}, 0x1c}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 630.276163ms ago: executing program 1 (id=1631): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x2, 0x12, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r3}, 0x18) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 630.109903ms ago: executing program 2 (id=1632): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close_range(r0, 0xffffffffffffffff, 0x0) 630.008033ms ago: executing program 5 (id=1633): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0xfffffffd}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 629.818813ms ago: executing program 4 (id=1634): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$can_raw(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380)={&(0x7f000000a000)=@canfd={{0x5}, 0x2, 0x2, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000094e2f9663a918fa1efd9b0b"}, 0x48}, 0x2}, 0x24000895) 580.159855ms ago: executing program 5 (id=1635): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d48751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b4933190432c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e953c03513af3a1e6f78608890f912f087214dac0638", 0xc1}], 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) 567.292986ms ago: executing program 1 (id=1636): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x7f00, @remote, 0x3}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) memfd_create(0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000286dd6000050000103afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 462.804551ms ago: executing program 5 (id=1637): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 462.637711ms ago: executing program 4 (id=1639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a0001"], 0x110}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setreuid(0xee01, 0xee01) 462.175351ms ago: executing program 1 (id=1649): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4796f0000090548de", 0xfc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000400), &(0x7f0000000500)=r2}, 0x20) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 416.015432ms ago: executing program 1 (id=1641): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000015c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1, 0x0, 0x800}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) io_setup(0x8, &(0x7f0000002740)=0x0) io_getevents(r2, 0x4, 0x13, &(0x7f0000000000), 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) io_submit(r2, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r3, 0x0, 0x0, 0x7}]) io_destroy(r2) 345.717896ms ago: executing program 4 (id=1642): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = gettid() sendmsg$unix(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="a7", 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r3, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 308.235427ms ago: executing program 4 (id=1643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$inet6(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xd, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 194.092962ms ago: executing program 0 (id=1644): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r3, 0x30, r1}, 0x10) 129.057875ms ago: executing program 0 (id=1645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r5}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) 121.503365ms ago: executing program 1 (id=1646): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x6, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000001c0)='cpu>00\t&&') 84.418837ms ago: executing program 0 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x2d) tkill(r3, 0x14) 39.188179ms ago: executing program 4 (id=1648): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCGETA(r1, 0x5405, &(0x7f00000000c0)) write(r0, &(0x7f0000000040)="1c00000018002551075c0165ff0ffc02802000030004000500e1000cee", 0x1d) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket(0xa, 0x2, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x10, 0x4e20, 0x8}}}}}, 0x0) 15.745279ms ago: executing program 1 (id=1650): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x85f8, 0x8], 0x0, 0x0, 0x2, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$PROG_LOAD(0x5, 0x0, 0x0) 7.04862ms ago: executing program 0 (id=1651): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0xf132, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fd\x00') ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan1\x00'}) 0s ago: executing program 5 (id=1652): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r2}, 0x18) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) kernel console output (not intermixed with test programs): moving interface: batadv_slave_1 [ 62.837847][ T4672] netlink: 24 bytes leftover after parsing attributes in process `syz.0.427'. [ 62.837953][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 62.858945][ T4655] net_ratelimit: 10 callbacks suppressed [ 62.859036][ T4655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 62.882635][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.132433][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.139901][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.224828][ T4685] veth1_to_bond: left promiscuous mode [ 63.230485][ T4685] veth1_to_bond: left allmulticast mode [ 63.256385][ T52] Bluetooth: hci0: Frame reassembly failed (-84) [ 63.275902][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.323831][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 63.495196][ T4685] ip6gre1: left allmulticast mode [ 63.514448][ T3621] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.531386][ T3621] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.569430][ T3621] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.590274][ T3621] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.710776][ T4705] netlink: 'syz.4.438': attribute type 1 has an invalid length. [ 63.727055][ T4705] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.740837][ T4705] bond1: entered allmulticast mode [ 63.873464][ T4710] loop0: detected capacity change from 0 to 256 [ 63.959791][ T4722] loop3: detected capacity change from 0 to 8192 [ 63.976786][ T4728] loop2: detected capacity change from 0 to 128 [ 64.018283][ T3308] loop3: p2 p3 p4 [ 64.027446][ T3308] loop3: p2 start 164919041 is beyond EOD, truncated [ 64.034238][ T3308] loop3: p3 size 66846464 extends beyond EOD, truncated [ 64.044979][ T3308] loop3: p4 size 37048832 extends beyond EOD, truncated [ 64.059504][ T4722] loop3: p2 p3 p4 [ 64.064399][ T4722] loop3: p2 start 164919041 is beyond EOD, truncated [ 64.071146][ T4722] loop3: p3 size 66846464 extends beyond EOD, truncated [ 64.083770][ T4722] loop3: p4 size 37048832 extends beyond EOD, truncated [ 64.098067][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.132860][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.193171][ T4739] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.210912][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 64.211186][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 64.249458][ T4738] bridge_slave_0: left allmulticast mode [ 64.255200][ T4738] bridge_slave_0: left promiscuous mode [ 64.260902][ T4738] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.270674][ T4738] bridge_slave_1: left allmulticast mode [ 64.276499][ T4738] bridge_slave_1: left promiscuous mode [ 64.282438][ T4738] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.292324][ T4738] bond0: (slave bond_slave_0): Releasing backup interface [ 64.302450][ T4738] bond0: (slave bond_slave_1): Releasing backup interface [ 64.314173][ T4738] team0: Port device team_slave_0 removed [ 64.323184][ T4738] team0: Port device team_slave_1 removed [ 64.333166][ T4738] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 64.350529][ T4739] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.423046][ T4739] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.457716][ T4746] netlink: 'syz.2.453': attribute type 1 has an invalid length. [ 64.477466][ T4746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.493516][ T4746] bond0: entered allmulticast mode [ 64.525050][ T4739] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.588884][ T3621] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.600369][ T3621] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.612299][ T3621] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.626843][ T3621] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.321317][ T3990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 65.321349][ T3488] Bluetooth: hci0: command 0x1003 tx timeout [ 65.373078][ T4773] 9p: Unknown access argument : -22 [ 65.435303][ T4771] loop1: detected capacity change from 0 to 8192 [ 65.482557][ T4771] loop1: p2 p3 p4 [ 65.486456][ T4771] loop1: p2 start 164919041 is beyond EOD, truncated [ 65.493212][ T4771] loop1: p3 size 66846464 extends beyond EOD, truncated [ 65.503790][ T4771] loop1: p4 size 37048832 extends beyond EOD, truncated [ 65.587197][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 65.596198][ T4778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 65.627666][ T3554] udevd[3554]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 65.639031][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 65.959855][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 65.959870][ T29] audit: type=1400 audit(65.939:1244): avc: denied { create } for pid=4792 comm="syz.3.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 66.032299][ T29] audit: type=1400 audit(65.989:1245): avc: denied { sys_admin } for pid=4792 comm="syz.3.473" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 66.696377][ T4804] vlan2: entered allmulticast mode [ 66.972212][ T29] audit: type=1400 audit(66.959:1246): avc: denied { write } for pid=4805 comm="syz.3.478" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 67.211762][ T29] audit: type=1400 audit(67.199:1247): avc: denied { mount } for pid=4813 comm="syz.0.482" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.251411][ T29] audit: type=1400 audit(67.219:1248): avc: denied { mounton } for pid=4813 comm="syz.0.482" path="/86/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 67.312246][ T29] audit: type=1400 audit(67.299:1249): avc: denied { unmount } for pid=3314 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 67.773780][ T29] audit: type=1326 audit(67.749:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 67.825551][ T29] audit: type=1326 audit(67.749:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 67.825598][ T29] audit: type=1326 audit(67.789:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 67.825629][ T29] audit: type=1326 audit(67.789:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4823 comm="syz.2.486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 67.853861][ T4818] loop0: detected capacity change from 0 to 512 [ 67.931465][ T4818] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.484: bad orphan inode 11862016 [ 67.949310][ T4818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 68.031680][ T4835] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.055133][ T4835] loop1: detected capacity change from 0 to 512 [ 68.094852][ T4835] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.160091][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 68.243779][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.293609][ T4859] netlink: 'syz.1.499': attribute type 1 has an invalid length. [ 68.307841][ T4859] bond2: entered promiscuous mode [ 68.313135][ T4859] bond2: entered allmulticast mode [ 68.318939][ T4859] 8021q: adding VLAN 0 to HW filter on device bond2 [ 68.346170][ T4859] bond2: (slave gretap1): making interface the new active one [ 68.353823][ T4859] gretap1: entered promiscuous mode [ 68.359134][ T4859] gretap1: entered allmulticast mode [ 68.365248][ T3990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.419885][ T4859] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 68.452294][ T4872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.505'. [ 68.490465][ T4868] vlan2: entered allmulticast mode [ 68.512779][ T4868] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 68.624349][ T4885] bridge: RTM_NEWNEIGH with invalid ether address [ 68.654569][ T4859] syz.1.499 (4859) used greatest stack depth: 9680 bytes left [ 68.746105][ T4897] loop2: detected capacity change from 0 to 2048 [ 68.810320][ T4907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 68.827728][ T4905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4905 comm=syz.4.521 [ 69.088442][ T4930] netlink: 24 bytes leftover after parsing attributes in process `syz.4.533'. [ 69.323034][ T4945] syzkaller0: entered promiscuous mode [ 69.328580][ T4945] syzkaller0: entered allmulticast mode [ 69.336235][ T4951] Cannot find del_set index 2 as target [ 69.472236][ T4965] netlink: 'syz.0.547': attribute type 14 has an invalid length. [ 69.504329][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.533487][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.549128][ T4975] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4975 comm=syz.3.551 [ 69.565270][ T4973] loop0: detected capacity change from 0 to 128 [ 69.573625][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.595066][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.640490][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.653957][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.667518][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.687088][ T4963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=4963 comm=syz.4.546 [ 69.772322][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.772322][ T3590] loop0: rw=1, sector=145, nr_sectors = 16 limit=128 [ 69.808854][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.808854][ T3590] loop0: rw=1, sector=169, nr_sectors = 8 limit=128 [ 69.832481][ T4998] netlink: 44 bytes leftover after parsing attributes in process `syz.1.559'. [ 69.842303][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.842303][ T3590] loop0: rw=1, sector=185, nr_sectors = 8 limit=128 [ 69.856401][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.856401][ T3590] loop0: rw=1, sector=201, nr_sectors = 8 limit=128 [ 69.861894][ T4986] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.874788][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.874788][ T3590] loop0: rw=1, sector=217, nr_sectors = 8 limit=128 [ 69.877131][ T4986] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.891025][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.891025][ T3590] loop0: rw=1, sector=233, nr_sectors = 8 limit=128 [ 69.912140][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.912140][ T3590] loop0: rw=1, sector=249, nr_sectors = 8 limit=128 [ 69.935111][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.935111][ T3590] loop0: rw=1, sector=265, nr_sectors = 8 limit=128 [ 69.958481][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.958481][ T3590] loop0: rw=1, sector=281, nr_sectors = 8 limit=128 [ 69.972258][ T4986] batman_adv: batadv0: Interface deactivated: dummy0 [ 69.981085][ T3590] kworker/u8:41: attempt to access beyond end of device [ 69.981085][ T3590] loop0: rw=1, sector=297, nr_sectors = 8 limit=128 [ 70.040007][ T4986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.067362][ T4986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.146321][ T5005] lo: entered allmulticast mode [ 70.175715][ T5005] lo: entered promiscuous mode [ 70.180690][ T5005] lo: left allmulticast mode [ 70.187134][ T3621] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.216726][ T3621] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.239628][ T5014] loop0: detected capacity change from 0 to 128 [ 70.243138][ T5012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.261436][ T3621] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.276888][ T3621] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.278434][ T5014] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 70.293323][ T5014] FAT-fs (loop0): Filesystem has been set read-only [ 70.294122][ T5012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.322624][ T5014] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 70.330516][ T5014] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 70.447331][ T5023] can0: slcan on ptm0. [ 70.492559][ T5023] can0 (unregistered): slcan off ptm0. [ 70.498346][ T5023] Falling back ldisc for ptm0. [ 70.588311][ T5032] loop2: detected capacity change from 0 to 1024 [ 70.602024][ T5032] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 70.613034][ T5032] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 70.625168][ T5032] JBD2: no valid journal superblock found [ 70.630941][ T5032] EXT4-fs (loop2): Could not load journal inode [ 70.681525][ T5029] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 71.001375][ T5049] tipc: Started in network mode [ 71.006478][ T5049] tipc: Node identity 0239e8d00757, cluster identity 4711 [ 71.013749][ T5049] tipc: Enabled bearer , priority 0 [ 71.022467][ T5049] tipc: Disabling bearer [ 71.063164][ T5057] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 71.072687][ T5057] team0: Port device dummy0 added [ 71.079375][ T5057] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 71.091623][ T5057] team0: Port device dummy0 removed [ 71.098272][ T5057] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 71.143036][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 71.143055][ T29] audit: type=1326 audit(71.119:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.172046][ T29] audit: type=1326 audit(71.119:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.194722][ T29] audit: type=1326 audit(71.129:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.217434][ T29] audit: type=1326 audit(71.129:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.240088][ T29] audit: type=1326 audit(71.129:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.262732][ T29] audit: type=1326 audit(71.129:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.285402][ T29] audit: type=1326 audit(71.129:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.308116][ T29] audit: type=1326 audit(71.129:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.330930][ T29] audit: type=1326 audit(71.129:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.421628][ T29] audit: type=1326 audit(71.129:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5060 comm="syz.1.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 71.473476][ T5066] loop0: detected capacity change from 0 to 128 [ 71.485533][ T5066] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 71.493443][ T5066] FAT-fs (loop0): Filesystem has been set read-only [ 71.500324][ T5066] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 71.508223][ T5066] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 71.537072][ T5070] buffer_io_error: 16 callbacks suppressed [ 71.537140][ T5070] Buffer I/O error on dev loop0, logical block 2065, async page read [ 71.551519][ T5070] Buffer I/O error on dev loop0, logical block 2066, async page read [ 71.559675][ T5070] Buffer I/O error on dev loop0, logical block 2067, async page read [ 71.568517][ T5070] Buffer I/O error on dev loop0, logical block 2068, async page read [ 71.576836][ T5070] Buffer I/O error on dev loop0, logical block 2069, async page read [ 71.585285][ T5070] Buffer I/O error on dev loop0, logical block 2070, async page read [ 71.594071][ T5070] Buffer I/O error on dev loop0, logical block 2071, async page read [ 71.602476][ T5070] Buffer I/O error on dev loop0, logical block 2072, async page read [ 71.610714][ T5066] Buffer I/O error on dev loop0, logical block 2065, async page read [ 71.619151][ T5066] Buffer I/O error on dev loop0, logical block 2066, async page read [ 71.771611][ T3533] Bluetooth: hci0: Frame reassembly failed (-84) [ 72.325513][ T5097] netlink: 52 bytes leftover after parsing attributes in process `syz.3.596'. [ 72.682303][ T5119] bridge0: port 3(gretap0) entered blocking state [ 72.688880][ T5119] bridge0: port 3(gretap0) entered disabled state [ 72.710697][ T5119] gretap0: entered allmulticast mode [ 72.719463][ T5119] gretap0: entered promiscuous mode [ 72.773933][ T5123] netlink: 14 bytes leftover after parsing attributes in process `syz.4.605'. [ 72.801542][ T5123] hsr_slave_0: left promiscuous mode [ 72.801867][ T5107] loop3: detected capacity change from 0 to 512 [ 72.814017][ T5123] hsr_slave_1: left promiscuous mode [ 72.838082][ T5107] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.610: bad orphan inode 11862016 [ 72.857016][ T5107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 72.937974][ T5130] netlink: 40 bytes leftover after parsing attributes in process `syz.4.607'. [ 72.987109][ T5130] ip6gre2: entered promiscuous mode [ 72.992423][ T5130] ip6gre2: entered allmulticast mode [ 73.093541][ T5138] netlink: 96 bytes leftover after parsing attributes in process `syz.1.611'. [ 73.108278][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 73.201075][ T5144] netlink: 'syz.4.614': attribute type 1 has an invalid length. [ 73.227698][ T5144] bond2: entered promiscuous mode [ 73.232830][ T5144] bond2: entered allmulticast mode [ 73.238181][ T5144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 73.257377][ T5144] bond2: (slave gretap1): making interface the new active one [ 73.264936][ T5144] gretap1: entered promiscuous mode [ 73.270292][ T5144] gretap1: entered allmulticast mode [ 73.303186][ T5144] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 73.313403][ T5153] bridge: RTM_NEWNEIGH with invalid ether address [ 73.349536][ T5144] vlan2: entered allmulticast mode [ 73.355404][ T5144] bond2: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 73.447323][ T5144] syz.4.614 (5144) used greatest stack depth: 9584 bytes left [ 73.539351][ T5165] netlink: 24 bytes leftover after parsing attributes in process `syz.0.623'. [ 73.596827][ T5169] lo: left promiscuous mode [ 73.744908][ T5169] ip6gre1: left allmulticast mode [ 73.752603][ T5169] bond2: left allmulticast mode [ 73.758002][ T3396] syz1: Port: 1 Link DOWN [ 73.762592][ T52] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.773098][ T52] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.782496][ T52] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.807635][ T52] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.811776][ T3488] Bluetooth: hci0: command 0x1003 tx timeout [ 73.822628][ T3990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 73.899583][ T5178] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 73.913674][ T5178] ip6gre2: entered promiscuous mode [ 73.918983][ T5178] ip6gre2: entered allmulticast mode [ 73.982302][ T5190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'. [ 74.052603][ T5195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 74.064592][ T5168] loop4: detected capacity change from 0 to 512 [ 74.071415][ T5195] IPVS: Error connecting to the multicast addr [ 74.087193][ T5168] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.624: bad orphan inode 11862016 [ 74.106688][ T5168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 74.122234][ T5200] netlink: 68 bytes leftover after parsing attributes in process `syz.1.637'. [ 74.265992][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 74.362014][ T5215] netlink: 40 bytes leftover after parsing attributes in process `syz.1.644'. [ 74.382638][ T5215] ip6gre1: entered promiscuous mode [ 74.387917][ T5215] ip6gre1: entered allmulticast mode [ 74.824708][ T5225] tipc: Failed to remove unknown binding: 66,1,1/0:585070517/585070519 [ 74.833130][ T5225] tipc: Failed to remove unknown binding: 66,1,1/0:585070517/585070519 [ 74.870377][ T5232] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 74.895178][ T5232] bond0: (slave dummy0): Releasing backup interface [ 74.905982][ T5232] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 74.931724][ T5232] team0: Failed to send options change via netlink (err -105) [ 74.939403][ T5232] team0: Port device dummy0 added [ 74.952745][ T5237] netlink: 'syz.1.651': attribute type 10 has an invalid length. [ 74.963135][ T5237] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 74.984607][ T5237] team0: Failed to send options change via netlink (err -105) [ 75.008584][ T5237] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 75.017951][ T5237] team0: Port device dummy0 removed [ 75.025478][ T5237] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 75.041908][ T5239] ip6gre3: entered allmulticast mode [ 75.106753][ T5242] ip6gre1: entered promiscuous mode [ 75.112140][ T5242] ip6gre1: entered allmulticast mode [ 75.213925][ T5256] netlink: 'syz.3.662': attribute type 4 has an invalid length. [ 75.275376][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.283511][ T5263] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.303099][ T5263] batman_adv: batadv0: Removing interface: dummy0 [ 75.329230][ T5267] gretap0: left allmulticast mode [ 75.334438][ T5267] gretap0: left promiscuous mode [ 75.339550][ T5267] bridge0: port 3(gretap0) entered disabled state [ 75.349714][ T5267] bridge_slave_1: left allmulticast mode [ 75.355560][ T5267] bridge_slave_1: left promiscuous mode [ 75.361413][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.372804][ T5267] bridge_slave_0: left allmulticast mode [ 75.378607][ T5267] bridge_slave_0: left promiscuous mode [ 75.384526][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.399580][ T5269] loop0: detected capacity change from 0 to 1024 [ 75.492590][ T5269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.522560][ T5269] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4193: comm syz.0.666: Allocating blocks 449-513 which overlap fs metadata [ 75.546433][ T5268] EXT4-fs (loop0): pa ffff888106e9e770: logic 48, phys. 177, len 21 [ 75.554565][ T5268] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 75.581408][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.177661][ T5308] bridge0: entered promiscuous mode [ 76.183271][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 76.183287][ T29] audit: type=1400 audit(76.159:1539): avc: denied { setopt } for pid=5307 comm="syz.2.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.213551][ T5308] bridge0: left promiscuous mode [ 77.179614][ T5331] loop3: detected capacity change from 0 to 1024 [ 77.188574][ T5331] EXT4-fs: Ignoring removed nobh option [ 77.207544][ T5331] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.227045][ T29] audit: type=1400 audit(77.209:1540): avc: denied { mounton } for pid=5330 comm="syz.3.691" path="/147/file1/bus" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.271412][ T5331] loop3: detected capacity change from 1024 to 64 [ 77.281277][ T29] audit: type=1400 audit(77.259:1541): avc: denied { append } for pid=5330 comm="syz.3.691" path="/147/file1/cpuacct.usage_percpu" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.304815][ T29] audit: type=1400 audit(77.259:1542): avc: denied { map } for pid=5330 comm="syz.3.691" path="/147/file1/cpuacct.usage_percpu" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 77.337281][ T29] audit: type=1326 audit(77.319:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5335 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 77.362134][ T5336] __nla_validate_parse: 7 callbacks suppressed [ 77.362151][ T5336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.693'. [ 77.380014][ T29] audit: type=1326 audit(77.339:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5335 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 77.402812][ T29] audit: type=1326 audit(77.339:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5335 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 77.425715][ T29] audit: type=1326 audit(77.339:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5335 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 77.432953][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.448418][ T29] audit: type=1326 audit(77.339:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5335 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 77.484389][ T29] audit: type=1326 audit(77.339:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5335 comm="syz.2.693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f721a09f749 code=0x7ffc0000 [ 77.489607][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.521493][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.554345][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.576572][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.591696][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.605404][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.635568][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.657124][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.670865][ T3315] EXT4-fs warning (device loop3): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 77.817631][ T5356] netlink: 24 bytes leftover after parsing attributes in process `syz.2.702'. [ 77.863141][ T5357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.699'. [ 78.056631][ T3315] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.128318][ T5332] bio_check_eod: 70656 callbacks suppressed [ 78.128381][ T5332] kmmpd-loop3: attempt to access beyond end of device [ 78.128381][ T5332] loop3: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 78.147953][ T5332] buffer_io_error: 56462 callbacks suppressed [ 78.147999][ T5332] Buffer I/O error on dev loop3, logical block 64, lost sync page write [ 78.457208][ T5379] xt_hashlimit: max too large, truncated to 1048576 [ 78.563124][ T3535] bridge_slave_1: left allmulticast mode [ 78.568832][ T3535] bridge_slave_1: left promiscuous mode [ 78.574840][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.620248][ T3535] bridge_slave_0: left promiscuous mode [ 78.625992][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.649569][ T5392] netlink: 'syz.1.716': attribute type 17 has an invalid length. [ 78.657406][ T5392] netlink: 148 bytes leftover after parsing attributes in process `syz.1.716'. [ 78.783454][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.803802][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.816130][ T3535] bond0 (unregistering): Released all slaves [ 78.903462][ T3535] tipc: Disabling bearer [ 78.908762][ T3535] tipc: Left network mode [ 78.945680][ T3535] hsr_slave_0: left promiscuous mode [ 78.980133][ T5418] loop4: detected capacity change from 0 to 1024 [ 79.009035][ T5418] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.021696][ T5424] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.732'. [ 79.030879][ T5424] netlink: 24 bytes leftover after parsing attributes in process `syz.0.732'. [ 79.043455][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 79.069509][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 79.075053][ T5418] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4193: comm syz.4.725: Allocating blocks 449-513 which overlap fs metadata [ 79.100490][ T5417] EXT4-fs (loop4): pa ffff888106e9e700: logic 48, phys. 177, len 21 [ 79.108658][ T5417] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 4 [ 79.130507][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.235465][ T3595] Bluetooth: hci0: Frame reassembly failed (-84) [ 79.250398][ T5388] chnl_net:caif_netlink_parms(): no params data found [ 79.270812][ T5431] netlink: 4 bytes leftover after parsing attributes in process `syz.4.726'. [ 79.303037][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.310106][ T5388] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.317665][ T5388] bridge_slave_0: entered allmulticast mode [ 79.324145][ T5388] bridge_slave_0: entered promiscuous mode [ 79.331011][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.338246][ T5388] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.345554][ T5388] bridge_slave_1: entered allmulticast mode [ 79.351986][ T5388] bridge_slave_1: entered promiscuous mode [ 79.370088][ T5388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.380715][ T5388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.401796][ T5388] team0: Port device team_slave_0 added [ 79.408403][ T5388] team0: Port device team_slave_1 added [ 79.424320][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.431320][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.457358][ T5388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.468723][ T5388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.475741][ T5388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.501736][ T5388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.528482][ T5388] hsr_slave_0: entered promiscuous mode [ 79.534640][ T5388] hsr_slave_1: entered promiscuous mode [ 79.540463][ T5388] debugfs: 'hsr0' already exists in 'hsr' [ 79.546214][ T5388] Cannot create hsr debugfs directory [ 79.610953][ T5388] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 79.620149][ T5388] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 79.629369][ T5388] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 79.638210][ T5388] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 79.653911][ T5388] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.660996][ T5388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.668458][ T5388] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.675547][ T5388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.703870][ T5388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.716076][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.724267][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.735995][ T5388] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.746750][ T3576] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.753894][ T3576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.764288][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.771373][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.875078][ T5388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.993834][ T5476] selinux_netlink_send: 52 callbacks suppressed [ 79.993856][ T5476] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2050 sclass=netlink_route_socket pid=5476 comm=syz.2.737 [ 80.114417][ T5388] veth0_vlan: entered promiscuous mode [ 80.130756][ T5388] veth1_vlan: entered promiscuous mode [ 80.156263][ T5388] veth0_macvtap: entered promiscuous mode [ 80.168232][ T5483] loop2: detected capacity change from 0 to 8192 [ 80.173688][ T5388] veth1_macvtap: entered promiscuous mode [ 80.209155][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.223142][ T5487] loop4: detected capacity change from 0 to 512 [ 80.230165][ T5483] loop2: p1 p2 p3 p4 [ 80.236355][ T5388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.245717][ T5483] loop2: p1 size 3523149824 extends beyond EOD, truncated [ 80.256246][ T3595] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.270653][ T5483] loop2: p2 start 4293394688 is beyond EOD, truncated [ 80.277642][ T5483] loop2: p3 start 150994944 is beyond EOD, truncated [ 80.284419][ T5483] loop2: p4 size 50331648 extends beyond EOD, truncated [ 80.285562][ T3595] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.304237][ T3595] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.304448][ T5487] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 80.318022][ T3595] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.336296][ T5487] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 80.350719][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 80.370898][ T5487] EXT4-fs (loop4): 1 truncate cleaned up [ 80.378191][ T5384] udevd[5384]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 80.397699][ T5487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.443857][ T5487] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 80.470175][ T5487] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 80.493972][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.683559][ T5498] cgroup: fork rejected by pids controller in /syz2 [ 81.241317][ T3488] Bluetooth: hci0: command 0x1003 tx timeout [ 81.249208][ T3990] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 81.276831][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 81.276848][ T29] audit: type=1400 audit(81.259:1604): avc: denied { setopt } for pid=6426 comm="syz.1.750" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.319028][ T6429] pim6reg: entered allmulticast mode [ 81.338897][ T6429] pim6reg: left allmulticast mode [ 81.454482][ T29] audit: type=1400 audit(81.439:1605): avc: denied { name_connect } for pid=6542 comm="syz.1.752" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 81.647268][ T6554] loop0: detected capacity change from 0 to 8192 [ 81.702851][ T5384] loop0: p1 p2 p3 p4 [ 81.719916][ T5384] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 81.729537][ T5384] loop0: p2 start 4293394688 is beyond EOD, truncated [ 81.736451][ T5384] loop0: p3 start 150994944 is beyond EOD, truncated [ 81.743258][ T5384] loop0: p4 size 50331648 extends beyond EOD, truncated [ 81.760489][ T29] audit: type=1400 audit(81.739:1606): avc: denied { listen } for pid=6564 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.779273][ T29] audit: type=1400 audit(81.739:1607): avc: denied { accept } for pid=6564 comm="syz.1.760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 81.803470][ T29] audit: type=1400 audit(81.789:1608): avc: denied { create } for pid=6567 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.846382][ T29] audit: type=1400 audit(81.809:1609): avc: denied { setopt } for pid=6567 comm="syz.5.761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.924395][ T29] audit: type=1400 audit(81.869:1610): avc: denied { tracepoint } for pid=6571 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 82.066295][ T6580] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 82.105108][ T6554] loop0: p1 p2 p3 p4 [ 82.109274][ T6554] loop0: p1 size 3523149824 extends beyond EOD, truncated [ 82.128859][ T6554] loop0: p2 start 4293394688 is beyond EOD, truncated [ 82.135796][ T6554] loop0: p3 start 150994944 is beyond EOD, truncated [ 82.142570][ T6554] loop0: p4 size 50331648 extends beyond EOD, truncated [ 82.221090][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 82.233257][ T5384] udevd[5384]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 82.268040][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 82.279568][ T5384] udevd[5384]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 82.425219][ T6594] syzkaller1: entered promiscuous mode [ 82.430752][ T6594] syzkaller1: entered allmulticast mode [ 82.476444][ T6597] macsec1: entered promiscuous mode [ 82.481815][ T6597] bridge0: entered promiscuous mode [ 82.505285][ T6597] bridge0: port 3(macsec1) entered blocking state [ 82.511827][ T6597] bridge0: port 3(macsec1) entered disabled state [ 82.530222][ T6597] macsec1: entered allmulticast mode [ 82.535681][ T6597] bridge0: entered allmulticast mode [ 82.711967][ T6597] macsec1: left allmulticast mode [ 82.717151][ T6597] bridge0: left allmulticast mode [ 82.751887][ T6597] bridge0: left promiscuous mode [ 82.784491][ T6606] ip6gre2: entered allmulticast mode [ 82.798729][ T6609] mmap: syz.4.781 (6609) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.899260][ T29] audit: type=1326 audit(82.879:1611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6618 comm="syz.2.785" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f721a09f749 code=0x0 [ 82.951685][ T29] audit: type=1400 audit(82.929:1612): avc: denied { write } for pid=6618 comm="syz.2.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 83.273731][ T29] audit: type=1400 audit(83.259:1613): avc: denied { create } for pid=6640 comm="syz.0.796" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 83.379469][ T6645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.798'. [ 83.587649][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.0.800'. [ 83.642710][ T6651] netlink: 16 bytes leftover after parsing attributes in process `syz.0.801'. [ 83.654747][ T6651] gtp0: entered promiscuous mode [ 83.692208][ T6653] netlink: 'syz.0.802': attribute type 1 has an invalid length. [ 83.707477][ T6653] 8021q: adding VLAN 0 to HW filter on device bond3 [ 83.723189][ T6653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.753845][ T6653] bond3: (slave batadv0): making interface the new active one [ 83.792349][ T6653] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 83.846971][ T6660] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 83.862275][ T6660] team1: entered promiscuous mode [ 83.867557][ T6660] team1: entered allmulticast mode [ 83.873167][ T6660] 8021q: adding VLAN 0 to HW filter on device team1 [ 83.886631][ T6664] loop4: detected capacity change from 0 to 512 [ 83.901386][ T6664] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 83.924001][ T6666] loop0: detected capacity change from 0 to 512 [ 83.930799][ T6666] EXT4-fs: Ignoring removed i_version option [ 83.936944][ T6666] EXT4-fs: Ignoring removed bh option [ 83.944212][ T6664] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 159 vs 220 free clusters [ 83.962007][ T6664] EXT4-fs (loop4): Remounting filesystem read-only [ 83.968755][ T6664] EXT4-fs (loop4): 1 truncate cleaned up [ 83.975248][ T6664] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.018748][ T6666] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.051928][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.069176][ T6676] loop2: detected capacity change from 0 to 128 [ 84.072145][ T6679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.814'. [ 84.083594][ T6680] netlink: 28 bytes leftover after parsing attributes in process `syz.5.813'. [ 84.120430][ T6676] syz.2.811: attempt to access beyond end of device [ 84.120430][ T6676] loop2: rw=0, sector=121, nr_sectors = 120 limit=128 [ 84.122644][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.135603][ T6679] 8021q: adding VLAN 0 to HW filter on device bond3 [ 84.181549][ T6679] vlan2: entered allmulticast mode [ 84.186723][ T6679] bond3: entered allmulticast mode [ 84.236610][ T6689] ip6gre3: entered allmulticast mode [ 84.417486][ T6708] loop4: detected capacity change from 0 to 512 [ 84.442502][ T6708] EXT4-fs: Ignoring removed i_version option [ 84.448626][ T6708] EXT4-fs: Ignoring removed bh option [ 84.490480][ T6708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.538061][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.569877][ T6727] netlink: 'syz.2.835': attribute type 30 has an invalid length. [ 84.764562][ T6750] loop1: detected capacity change from 0 to 512 [ 84.780714][ T6750] EXT4-fs: Ignoring removed i_version option [ 84.786905][ T6750] EXT4-fs: Ignoring removed bh option [ 84.806514][ T6750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.844275][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.111147][ T6771] netlink: 399 bytes leftover after parsing attributes in process `syz.4.851'. [ 85.120305][ T6771] openvswitch: netlink: ufid size 36 bytes exceeds the range (1, 16) [ 85.172088][ T6786] loop5: detected capacity change from 0 to 164 [ 85.185670][ T6786] syz.5.856: attempt to access beyond end of device [ 85.185670][ T6786] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 85.212198][ T6786] syz.5.856: attempt to access beyond end of device [ 85.212198][ T6786] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.237099][ T6788] loop2: detected capacity change from 0 to 1024 [ 85.262824][ T6788] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.284210][ T6788] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.303186][ T6798] loop5: detected capacity change from 0 to 512 [ 85.322959][ T6798] EXT4-fs: Ignoring removed i_version option [ 85.329069][ T6798] EXT4-fs: Ignoring removed bh option [ 85.343855][ T6802] xt_hashlimit: max too large, truncated to 1048576 [ 85.363627][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.410160][ T6811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.863'. [ 85.419064][ T6811] netlink: 'syz.1.863': attribute type 30 has an invalid length. [ 85.441465][ T3576] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.453989][ T6798] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.490415][ T3576] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.514452][ T3576] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.525106][ T3576] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.554718][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.563975][ T6823] loop2: detected capacity change from 0 to 512 [ 85.599552][ T6823] EXT4-fs error (device loop2): __ext4_iget:5443: inode #2: block 67108864: comm syz.2.871: invalid block [ 85.636542][ T6823] EXT4-fs (loop2): get root inode failed [ 85.642433][ T6823] EXT4-fs (loop2): mount failed [ 85.713464][ T6832] loop2: detected capacity change from 0 to 128 [ 85.810006][ T6832] syz.2.875: attempt to access beyond end of device [ 85.810006][ T6832] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 85.828072][ T6832] syz.2.875: attempt to access beyond end of device [ 85.828072][ T6832] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 85.841583][ T6832] syz.2.875: attempt to access beyond end of device [ 85.841583][ T6832] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 85.855192][ T6832] syz.2.875: attempt to access beyond end of device [ 85.855192][ T6832] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 85.888846][ T6840] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.878'. [ 85.916140][ T6832] syz.2.875: attempt to access beyond end of device [ 85.916140][ T6832] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 85.943700][ T6847] loop1: detected capacity change from 0 to 128 [ 85.951621][ T6847] FAT-fs (loop1): Directory bread(block 162) failed [ 85.958439][ T6832] syz.2.875: attempt to access beyond end of device [ 85.958439][ T6832] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 85.970515][ T6847] FAT-fs (loop1): Directory bread(block 163) failed [ 86.001331][ T6847] FAT-fs (loop1): Directory bread(block 164) failed [ 86.008173][ T6849] loop0: detected capacity change from 0 to 128 [ 86.016165][ T6847] FAT-fs (loop1): Directory bread(block 165) failed [ 86.023426][ T6832] syz.2.875: attempt to access beyond end of device [ 86.023426][ T6832] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 86.047136][ T6847] FAT-fs (loop1): Directory bread(block 166) failed [ 86.055697][ T6847] FAT-fs (loop1): Directory bread(block 167) failed [ 86.065404][ T6847] FAT-fs (loop1): Directory bread(block 168) failed [ 86.091318][ T6847] FAT-fs (loop1): Directory bread(block 169) failed [ 86.111703][ T6847] FAT-fs (loop1): Directory bread(block 162) failed [ 86.118371][ T6847] FAT-fs (loop1): Directory bread(block 163) failed [ 86.276075][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.290226][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.303385][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.316332][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.329529][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.342418][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.355591][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.368633][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.382179][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.395326][ T6868] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=6868 comm=syz.1.890 [ 86.537650][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 86.537668][ T29] audit: type=1400 audit(86.519:1766): avc: denied { mount } for pid=6882 comm="syz.5.896" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.580539][ T29] audit: type=1326 audit(86.559:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6884 comm="syz.4.897" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41bf4cf749 code=0x0 [ 86.841684][ T6897] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 86.841888][ T29] audit: type=1400 audit(86.829:1768): avc: denied { relabelfrom } for pid=6896 comm="syz.5.902" name="UDPv6" dev="sockfs" ino=14689 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 86.873172][ T29] audit: type=1400 audit(86.829:1769): avc: denied { mac_admin } for pid=6896 comm="syz.5.902" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 86.893848][ T29] audit: type=1400 audit(86.829:1770): avc: denied { relabelto } for pid=6896 comm="syz.5.902" name="UDPv6" dev="sockfs" ino=14689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=udp_socket permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 86.951358][ T29] audit: type=1400 audit(86.929:1771): avc: denied { setopt } for pid=6900 comm="syz.5.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.970668][ T29] audit: type=1400 audit(86.929:1772): avc: denied { write } for pid=6900 comm="syz.5.905" path="socket:[14703]" dev="sockfs" ino=14703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.995481][ T6903] loop0: detected capacity change from 0 to 128 [ 87.050439][ T6907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.907'. [ 87.512109][ T6942] tipc: Started in network mode [ 87.517102][ T6942] tipc: Node identity 4a6bcff98c29, cluster identity 4711 [ 87.524488][ T6942] tipc: Enabled bearer , priority 0 [ 87.573164][ T6942] syzkaller0: entered promiscuous mode [ 87.578695][ T6942] syzkaller0: entered allmulticast mode [ 87.615813][ T6942] tipc: Resetting bearer [ 87.642003][ T6940] tipc: Resetting bearer [ 87.678078][ T6940] tipc: Disabling bearer [ 87.718481][ T6956] loop1: detected capacity change from 0 to 512 [ 87.731857][ T6956] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.739015][ T6956] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.927: bad orphan inode 13 [ 87.776041][ T6956] ext4_test_bit(bit=12, block=18) = 1 [ 87.781593][ T6956] is_bad_inode(inode)=0 [ 87.785797][ T6956] NEXT_ORPHAN(inode)=2130706432 [ 87.790679][ T6956] max_ino=32 [ 87.793934][ T6956] i_nlink=1 [ 87.799450][ T6956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 87.829486][ T6962] netlink: 'syz.2.929': attribute type 13 has an invalid length. [ 87.887085][ T6956] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 87.899798][ T29] audit: type=1400 audit(87.869:1773): avc: denied { execute } for pid=6955 comm="syz.1.927" name="file2" dev="loop1" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 87.936355][ T6956] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 87.967156][ T29] audit: type=1326 audit(87.949:1774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 88.022470][ T29] audit: type=1326 audit(87.979:1775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6953 comm="syz.4.926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 88.046445][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.077048][ T3535] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.094446][ T3535] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.112114][ T3535] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.129678][ T3596] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.396639][ T6989] loop1: detected capacity change from 0 to 512 [ 88.435145][ T6989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.457126][ T6989] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.940: corrupted xattr block 33: e_value out of bounds [ 88.471493][ T6989] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 88.480971][ T6989] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.940: corrupted xattr block 33: e_value out of bounds [ 88.496012][ T6989] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 88.505318][ T6989] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.940: corrupted xattr block 33: e_value out of bounds [ 88.546789][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.829736][ T7024] loop5: detected capacity change from 0 to 512 [ 88.841130][ T7024] EXT4-fs warning (device loop5): ext4_xattr_inode_get:560: inode #11: comm syz.5.954: EA inode hash validation failed [ 88.881916][ T7024] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.954: corrupted inode contents [ 88.894170][ T7024] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #15: comm syz.5.954: mark_inode_dirty error [ 88.905971][ T7024] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #15: comm syz.5.954: corrupted inode contents [ 88.918084][ T7024] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #15: comm syz.5.954: mark_inode_dirty error [ 88.930221][ T7024] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #15: comm syz.5.954: mark inode dirty (error -117) [ 88.943174][ T7024] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 88.952429][ T7024] EXT4-fs (loop5): 1 orphan inode deleted [ 88.958644][ T7024] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.987141][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.143607][ T7043] __nla_validate_parse: 2 callbacks suppressed [ 89.143626][ T7043] netlink: 4 bytes leftover after parsing attributes in process `syz.0.960'. [ 89.318663][ T7043] team2: entered promiscuous mode [ 89.323799][ T7043] team2: entered allmulticast mode [ 89.329188][ T7043] 8021q: adding VLAN 0 to HW filter on device team2 [ 89.369206][ T7048] bond0: (slave dummy0): Releasing backup interface [ 89.403749][ T7048] bridge_slave_0: left allmulticast mode [ 89.409444][ T7048] bridge_slave_0: left promiscuous mode [ 89.415240][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.425981][ T7050] netlink: 'syz.1.963': attribute type 10 has an invalid length. [ 89.433816][ T7050] netlink: 40 bytes leftover after parsing attributes in process `syz.1.963'. [ 89.666529][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz.4.964'. [ 89.832056][ T7048] bridge_slave_1: left allmulticast mode [ 89.837822][ T7048] bridge_slave_1: left promiscuous mode [ 89.843602][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.854445][ T7048] bond0: (slave bond_slave_0): Releasing backup interface [ 89.873134][ T7048] bond0: (slave bond_slave_1): Releasing backup interface [ 89.890298][ T7048] team0: Port device team_slave_0 removed [ 89.897735][ T7048] team0: Port device team_slave_1 removed [ 89.906639][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.915067][ T7048] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.922824][ T7048] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.939419][ T7050] veth1_vlan: left promiscuous mode [ 89.945678][ T7050] batman_adv: batadv0: Adding interface: veth1_vlan [ 89.952350][ T7050] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.995502][ T7050] batman_adv: batadv0: Interface activated: veth1_vlan [ 90.007123][ T7061] team0: Port device vlan0 added [ 90.038625][ T7074] netlink: 'syz.1.972': attribute type 1 has an invalid length. [ 90.066226][ T7074] bond4: entered promiscuous mode [ 90.071500][ T7074] bond4: entered allmulticast mode [ 90.076882][ T7074] 8021q: adding VLAN 0 to HW filter on device bond4 [ 90.092585][ T7074] bridge2: entered promiscuous mode [ 90.097981][ T7074] bridge2: entered allmulticast mode [ 90.104163][ T7074] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 90.173379][ T3596] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 90.215072][ T7082] loop1: detected capacity change from 0 to 512 [ 90.230170][ T7087] tipc: Enabled bearer , priority 0 [ 90.239413][ T7086] tipc: Resetting bearer [ 90.259476][ T7086] tipc: Disabling bearer [ 90.266475][ T7082] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 90.295959][ T7082] loop1: detected capacity change from 0 to 2048 [ 90.312064][ T3576] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 90.367200][ T7092] sch_fq: defrate 8 ignored. [ 90.682578][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.2.996'. [ 90.694385][ T7129] syz_tun: entered allmulticast mode [ 90.722887][ T7128] syz_tun: left allmulticast mode [ 90.791369][ T7136] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1001'. [ 90.809906][ T7132] syzkaller0: entered promiscuous mode [ 90.815591][ T7132] syzkaller0: entered allmulticast mode [ 90.880713][ T7139] loop0: detected capacity change from 0 to 1024 [ 90.897582][ T7136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 90.906992][ T7139] EXT4-fs: Ignoring removed orlov option [ 90.912843][ T7139] EXT4-fs: Ignoring removed orlov option [ 91.011955][ T7139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.102993][ T7148] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.1006' sets config #1 [ 91.113137][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.192592][ T7155] loop0: detected capacity change from 0 to 164 [ 91.213414][ T7155] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 91.229031][ T7155] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 91.267341][ T7157] syzkaller0: entered promiscuous mode [ 91.273059][ T7157] syzkaller0: entered allmulticast mode [ 91.339778][ T7170] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 91.416211][ T7180] loop0: detected capacity change from 0 to 128 [ 91.445958][ T7180] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 91.458640][ T7182] loop5: detected capacity change from 0 to 2048 [ 91.490120][ T5384] Alternate GPT is invalid, using primary GPT. [ 91.496687][ T5384] loop5: p2 p3 p7 [ 91.526111][ T7182] Alternate GPT is invalid, using primary GPT. [ 91.532833][ T7182] loop5: p2 p3 p7 [ 91.572764][ T3314] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 91.610251][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 91.620408][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop5p7, 10) failed: No such file or directory [ 91.630857][ T5384] udevd[5384]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 91.646839][ T7191] loop0: detected capacity change from 0 to 512 [ 91.675030][ T7191] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.721117][ T29] kauditd_printk_skb: 168 callbacks suppressed [ 91.721135][ T29] audit: type=1400 audit(91.699:1944): avc: denied { read write } for pid=7188 comm="syz.0.1022" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.749459][ T29] audit: type=1400 audit(91.699:1945): avc: denied { open } for pid=7188 comm="syz.0.1022" path="/198/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.751738][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1026'. [ 91.780985][ T7199] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1026'. [ 91.790551][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1026'. [ 91.799930][ T7199] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1026'. [ 91.809405][ T29] audit: type=1400 audit(91.759:1946): avc: denied { ioctl } for pid=7188 comm="syz.0.1022" path="/198/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 91.843887][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.959722][ T29] audit: type=1400 audit(91.939:1947): avc: denied { read } for pid=7211 comm="syz.0.1032" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 91.980424][ T29] audit: type=1400 audit(91.939:1948): avc: denied { open } for pid=7211 comm="syz.0.1032" path="net:[4026532393]" dev="nsfs" ino=4026532393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 92.003260][ T29] audit: type=1400 audit(91.939:1949): avc: denied { create } for pid=7211 comm="syz.0.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 92.165499][ T7227] loop1: detected capacity change from 0 to 256 [ 92.188972][ T29] audit: type=1400 audit(92.159:1950): avc: denied { mount } for pid=7226 comm="syz.1.1039" name="/" dev="loop1" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.251396][ T29] audit: type=1400 audit(92.169:1951): avc: denied { unmount } for pid=3318 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 92.388612][ T29] audit: type=1400 audit(92.369:1952): avc: denied { relabelfrom } for pid=7236 comm="syz.1.1042" name="NETLINK" dev="sockfs" ino=16457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 92.426975][ T29] audit: type=1400 audit(92.369:1953): avc: denied { relabelto } for pid=7236 comm="syz.1.1042" name="NETLINK" dev="sockfs" ino=16457 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 92.600198][ T7260] loop2: detected capacity change from 0 to 512 [ 92.617700][ T7260] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 92.640000][ T7260] EXT4-fs (loop2): 1 truncate cleaned up [ 92.694110][ T7260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.766502][ T7272] loop5: detected capacity change from 0 to 128 [ 92.893372][ T7277] loop1: detected capacity change from 0 to 1764 [ 93.108353][ T7292] loop5: detected capacity change from 0 to 2048 [ 93.132923][ T7292] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.204578][ T7291] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 93.219540][ T7291] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 224 with max blocks 6 with error 28 [ 93.231959][ T7291] EXT4-fs (loop5): This should not happen!! Data will be lost [ 93.231959][ T7291] [ 93.241717][ T7291] EXT4-fs (loop5): Total free blocks count 0 [ 93.247812][ T7291] EXT4-fs (loop5): Free/Dirty block details [ 93.253771][ T7291] EXT4-fs (loop5): free_blocks=2415919504 [ 93.259515][ T7291] EXT4-fs (loop5): dirty_blocks=16 [ 93.264727][ T7291] EXT4-fs (loop5): Block reservation details [ 93.270722][ T7291] EXT4-fs (loop5): i_reserved_data_blocks=1 [ 93.287108][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.368109][ T7301] selinux_netlink_send: 125 callbacks suppressed [ 93.368124][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.388088][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.401158][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.421696][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.434952][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.438719][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.448531][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.470437][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.483587][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.496845][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.510054][ T7301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34313 sclass=netlink_route_socket pid=7301 comm=syz.5.1067 [ 93.774114][ T7320] loop2: detected capacity change from 0 to 512 [ 93.798628][ T7320] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.1074: bg 0: block 5: invalid block bitmap [ 93.820843][ T7320] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 93.835757][ T7320] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1074: invalid indirect mapped block 3 (level 2) [ 93.852463][ T7320] EXT4-fs (loop2): 2 truncates cleaned up [ 93.860928][ T7320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.878686][ T7320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.196530][ T7345] loop4: detected capacity change from 0 to 1024 [ 94.221588][ T7345] EXT4-fs: Ignoring removed orlov option [ 94.241991][ T7345] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 94.256159][ T7345] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.294378][ T7347] tipc: Enabled bearer , priority 0 [ 94.304544][ T7346] tipc: Resetting bearer [ 94.323557][ T7354] __nla_validate_parse: 4 callbacks suppressed [ 94.323583][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1090'. [ 94.340482][ T7346] tipc: Disabling bearer [ 94.429431][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.483400][ T7366] netlink: 'syz.4.1095': attribute type 29 has an invalid length. [ 94.495796][ T7366] netlink: 'syz.4.1095': attribute type 29 has an invalid length. [ 94.508375][ T7366] netlink: 500 bytes leftover after parsing attributes in process `syz.4.1095'. [ 94.517549][ T7366] unsupported nla_type 66 [ 94.548633][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1098'. [ 95.060805][ T7387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1104'. [ 95.108199][ T7387] team1: entered promiscuous mode [ 95.108281][ T7387] team1: entered allmulticast mode [ 95.108408][ T7387] 8021q: adding VLAN 0 to HW filter on device team1 [ 95.698356][ T7416] IPVS: sync thread started: state = MASTER, mcast_ifn = hsr0, syncid = 4, id = 0 [ 95.698400][ T7415] IPVS: stopping master sync thread 7416 ... [ 95.998149][ T7426] loop5: detected capacity change from 0 to 1024 [ 96.026483][ T7426] EXT4-fs: Ignoring removed nomblk_io_submit option [ 96.068882][ T7426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.100591][ T7432] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 96.157450][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.226212][ T7441] loop5: detected capacity change from 0 to 512 [ 96.241432][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1125'. [ 96.264052][ T7441] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.381988][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.439484][ T7456] loop1: detected capacity change from 0 to 1024 [ 96.452036][ T7456] EXT4-fs: Ignoring removed orlov option [ 96.481936][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1131'. [ 96.495095][ T7461] ip6gre4: entered allmulticast mode [ 96.502401][ T7456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.721797][ T29] kauditd_printk_skb: 95 callbacks suppressed [ 96.721877][ T29] audit: type=1326 audit(96.709:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.806781][ T29] audit: type=1326 audit(96.739:2050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.829782][ T29] audit: type=1326 audit(96.739:2051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.852640][ T29] audit: type=1326 audit(96.739:2052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.875433][ T29] audit: type=1326 audit(96.739:2053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.898180][ T29] audit: type=1326 audit(96.739:2054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.921004][ T29] audit: type=1326 audit(96.739:2055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.944095][ T29] audit: type=1326 audit(96.739:2056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.966878][ T29] audit: type=1326 audit(96.739:2057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 96.989932][ T29] audit: type=1326 audit(96.739:2058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7467 comm="syz.4.1133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 97.048634][ T7470] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 97.155578][ T7472] netlink: 'syz.4.1135': attribute type 12 has an invalid length. [ 97.322305][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1140'. [ 97.355281][ T7483] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1140'. [ 97.416399][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.464652][ T7492] loop5: detected capacity change from 0 to 512 [ 97.549848][ T7492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.702903][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.810705][ T7515] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1153'. [ 97.861181][ T7518] rdma_op ffff88812331d180 conn xmit_rdma 0000000000000000 [ 97.929259][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1156'. [ 98.190025][ T7538] loop1: detected capacity change from 0 to 2048 [ 98.245225][ T7538] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.287218][ T7538] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 98.317233][ T7538] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 98.329778][ T7538] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.329778][ T7538] [ 98.339486][ T7538] EXT4-fs (loop1): Total free blocks count 0 [ 98.345848][ T7538] EXT4-fs (loop1): Free/Dirty block details [ 98.351905][ T7538] EXT4-fs (loop1): free_blocks=66060288 [ 98.357509][ T7538] EXT4-fs (loop1): dirty_blocks=48 [ 98.362688][ T7538] EXT4-fs (loop1): Block reservation details [ 98.368758][ T7538] EXT4-fs (loop1): i_reserved_data_blocks=3 [ 98.402347][ T3596] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 98.423165][ T7549] team0: Port device team_slave_1 removed [ 98.912462][ T7593] loop0: detected capacity change from 0 to 2048 [ 98.922814][ T7595] netlink: 'syz.5.1188': attribute type 30 has an invalid length. [ 98.944305][ T7593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.982685][ T3616] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.984360][ T7593] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 99.006294][ T7593] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 99.006989][ T3616] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.018811][ T7593] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.018811][ T7593] [ 99.037185][ T7593] EXT4-fs (loop0): Total free blocks count 0 [ 99.043358][ T7593] EXT4-fs (loop0): Free/Dirty block details [ 99.049336][ T7593] EXT4-fs (loop0): free_blocks=66060288 [ 99.055067][ T7593] EXT4-fs (loop0): dirty_blocks=48 [ 99.060202][ T7593] EXT4-fs (loop0): Block reservation details [ 99.066380][ T7593] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 99.073145][ T3535] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.095340][ T3535] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.119015][ T7606] loop2: detected capacity change from 0 to 1024 [ 99.125819][ T7606] EXT4-fs: Ignoring removed orlov option [ 99.134822][ T7606] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.167043][ T3535] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.243674][ T7612] loop1: detected capacity change from 0 to 164 [ 99.287628][ T7612] bio_check_eod: 2 callbacks suppressed [ 99.287647][ T7612] syz.1.1196: attempt to access beyond end of device [ 99.287647][ T7612] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 99.309976][ T7612] syz.1.1196: attempt to access beyond end of device [ 99.309976][ T7612] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 99.415042][ T7629] __nla_validate_parse: 5 callbacks suppressed [ 99.415061][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1203'. [ 99.430235][ T7629] netlink: 'syz.0.1203': attribute type 30 has an invalid length. [ 99.442215][ T3535] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.491824][ T3535] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.502939][ T7633] loop1: detected capacity change from 0 to 128 [ 99.509357][ T3535] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.522033][ T3616] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.585133][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.585133][ T7639] loop1: rw=2049, sector=153, nr_sectors = 8 limit=128 [ 99.614143][ T7641] loop5: detected capacity change from 0 to 2048 [ 99.639046][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.639046][ T7639] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 99.653295][ T7644] team0: Port device team_slave_1 removed [ 99.661363][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.661363][ T7639] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 99.681695][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.681695][ T7639] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 99.703046][ T7641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.716007][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.726640][ T7641] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 99.741619][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.741619][ T7639] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 99.783583][ T7641] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28 [ 99.793465][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.793465][ T7639] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 99.796158][ T7641] EXT4-fs (loop5): This should not happen!! Data will be lost [ 99.796158][ T7641] [ 99.809531][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.809531][ T7639] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 99.819163][ T7641] EXT4-fs (loop5): Total free blocks count 0 [ 99.819183][ T7641] EXT4-fs (loop5): Free/Dirty block details [ 99.819197][ T7641] EXT4-fs (loop5): free_blocks=66060288 [ 99.819212][ T7641] EXT4-fs (loop5): dirty_blocks=48 [ 99.832716][ T7639] syz.1.1204: attempt to access beyond end of device [ 99.832716][ T7639] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 99.838616][ T7641] EXT4-fs (loop5): Block reservation details [ 99.875075][ T7641] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 99.955320][ T3535] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 100.009308][ T7665] loop0: detected capacity change from 0 to 164 [ 100.060014][ T7670] loop5: detected capacity change from 0 to 128 [ 100.144423][ T7674] xt_hashlimit: max too large, truncated to 1048576 [ 100.175802][ T7677] netlink: 'syz.5.1220': attribute type 21 has an invalid length. [ 100.216831][ T7677] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1220'. [ 100.300117][ T7692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1228'. [ 100.388178][ T7700] loop1: detected capacity change from 0 to 1024 [ 100.401896][ T7700] EXT4-fs: inline encryption not supported [ 100.445430][ T7700] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.517611][ T7700] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4193: comm syz.1.1232: Allocating blocks 385-513 which overlap fs metadata [ 100.575040][ T7700] EXT4-fs (loop1): pa ffff888106e9e8c0: logic 16, phys. 129, len 24 [ 100.583150][ T7700] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 100.645681][ T7700] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 337:freeing already freed block (bit 21); block bitmap corrupt. [ 100.648279][ T7707] loop4: detected capacity change from 0 to 128 [ 100.675373][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1234'. [ 100.691575][ T7709] 8021q: adding VLAN 0 to HW filter on device bond4 [ 100.700313][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.714702][ T7709] vlan2: entered allmulticast mode [ 100.719888][ T7709] bond4: entered allmulticast mode [ 100.899345][ T7716] netlink: 'syz.4.1238': attribute type 21 has an invalid length. [ 100.923741][ T7716] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1238'. [ 101.055714][ T7729] loop2: detected capacity change from 0 to 128 [ 101.313964][ T7743] loop4: detected capacity change from 0 to 512 [ 101.343551][ T7747] bridge: RTM_NEWNEIGH with invalid ether address [ 101.381605][ T7743] EXT4-fs error (device loop4): __ext4_iget:5443: inode #2: block 67108864: comm syz.4.1248: invalid block [ 101.393364][ T7743] EXT4-fs (loop4): get root inode failed [ 101.399022][ T7743] EXT4-fs (loop4): mount failed [ 101.732404][ T7763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1256'. [ 102.070204][ T7767] tipc: Enabled bearer , priority 0 [ 102.093657][ T7767] syzkaller0: entered promiscuous mode [ 102.099197][ T7767] syzkaller0: entered allmulticast mode [ 102.142070][ T7767] tipc: Resetting bearer [ 102.162645][ T7766] tipc: Resetting bearer [ 102.176615][ T7766] tipc: Disabling bearer [ 102.280828][ T7778] loop1: detected capacity change from 0 to 128 [ 102.439535][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1266'. [ 102.533303][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 102.533322][ T29] audit: type=1400 audit(102.519:2116): avc: denied { sys_module } for pid=7787 comm="syz.1.1266" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 102.718029][ T29] audit: type=1400 audit(102.699:2117): avc: denied { name_bind } for pid=7806 comm="syz.4.1273" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 102.825917][ T29] audit: type=1400 audit(102.809:2118): avc: denied { read } for pid=7810 comm="syz.2.1274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 103.058313][ T7819] loop5: detected capacity change from 0 to 128 [ 103.115722][ T29] audit: type=1400 audit(103.099:2119): avc: denied { write } for pid=7821 comm="syz.5.1277" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 103.150644][ T7824] netlink: 'syz.5.1277': attribute type 13 has an invalid length. [ 103.325508][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.332831][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.448188][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.486922][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.682722][ T3576] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.691761][ T3576] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.700847][ T3576] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.709792][ T3576] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.813116][ T3576] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.822224][ T3576] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.843112][ T3576] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.852161][ T3576] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.088329][ T7849] loop0: detected capacity change from 0 to 1024 [ 104.095179][ T7849] EXT4-fs: Ignoring removed orlov option [ 104.105606][ T7849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.291093][ T7864] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1295'. [ 104.468656][ T7878] syz_tun: entered allmulticast mode [ 104.482525][ T7877] syz_tun: left allmulticast mode [ 104.537823][ T7882] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 104.593726][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.699064][ T7896] tipc: Enabled bearer , priority 0 [ 104.706644][ T7895] tipc: Resetting bearer [ 104.722225][ T7895] tipc: Disabling bearer [ 104.769014][ T7904] syzkaller0: entered promiscuous mode [ 104.774615][ T7904] syzkaller0: entered allmulticast mode [ 104.865493][ T7910] loop2: detected capacity change from 0 to 512 [ 104.900222][ T7910] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.1312: EA inode hash validation failed [ 104.937118][ T7910] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1312: corrupted inode contents [ 104.959204][ T7910] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #15: comm syz.2.1312: mark_inode_dirty error [ 104.971907][ T7910] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.1312: corrupted inode contents [ 105.021298][ T7910] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.1312: mark_inode_dirty error [ 105.041512][ T7910] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.1312: mark inode dirty (error -117) [ 105.061681][ T7910] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 105.084284][ T7910] EXT4-fs (loop2): 1 orphan inode deleted [ 105.100883][ T7910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.177716][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.189580][ T7926] loop4: detected capacity change from 0 to 1024 [ 105.204132][ T7926] EXT4-fs: Ignoring removed orlov option [ 105.216330][ T7926] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.624888][ T7942] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 105.633222][ T29] audit: type=1400 audit(105.609:2120): avc: denied { create } for pid=7941 comm="syz.1.1325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.662815][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.683610][ T7942] bond1: entered promiscuous mode [ 105.688701][ T7942] bond1: entered allmulticast mode [ 105.723688][ T7942] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.751598][ T7946] bridge1: entered promiscuous mode [ 105.756949][ T7946] bridge1: entered allmulticast mode [ 105.779761][ T7946] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 105.792213][ T3535] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 105.911526][ T3576] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.010160][ T7954] netlink: 'syz.4.1340': attribute type 1 has an invalid length. [ 106.018840][ T7955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.047114][ T7954] bond3: entered promiscuous mode [ 106.052287][ T7954] bond3: entered allmulticast mode [ 106.057856][ T7954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.075921][ T7954] bridge4: entered promiscuous mode [ 106.081327][ T7954] bridge4: entered allmulticast mode [ 106.089466][ T7954] bond3: (slave bridge4): Enslaving as a backup interface with an up link [ 106.102144][ T7955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.142104][ T29] audit: type=1326 audit(106.129:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.4.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 106.166816][ T29] audit: type=1326 audit(106.129:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.4.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 106.189832][ T29] audit: type=1326 audit(106.129:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.4.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 106.212904][ T29] audit: type=1326 audit(106.129:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.4.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 106.235753][ T29] audit: type=1326 audit(106.129:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.4.1332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=92 compat=0 ip=0x7f41bf4cf749 code=0x7ffc0000 [ 106.260102][ T3616] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.270895][ T7955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.363118][ T7955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.381445][ T3616] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.461777][ T3616] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.472452][ T7978] loop5: detected capacity change from 0 to 128 [ 106.488063][ T3616] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.501161][ T3595] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.509820][ T7978] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 106.527770][ T3595] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.608526][ T5388] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.691852][ T7993] netlink: 'syz.5.1347': attribute type 1 has an invalid length. [ 106.705173][ T7994] loop0: detected capacity change from 0 to 512 [ 106.732321][ T7994] EXT4-fs warning (device loop0): ext4_xattr_inode_get:560: inode #11: comm syz.0.1345: EA inode hash validation failed [ 106.749719][ T7998] loop1: detected capacity change from 0 to 512 [ 106.750548][ T7993] bond1: entered promiscuous mode [ 106.761122][ T7993] bond1: entered allmulticast mode [ 106.766959][ T7994] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1345: corrupted inode contents [ 106.779245][ T7993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.786421][ T7994] EXT4-fs error (device loop0): ext4_dirty_inode:6517: inode #15: comm syz.0.1345: mark_inode_dirty error [ 106.797765][ T7998] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.798114][ T7994] EXT4-fs error (device loop0): ext4_do_update_inode:5632: inode #15: comm syz.0.1345: corrupted inode contents [ 106.826012][ T7993] bridge3: entered promiscuous mode [ 106.831436][ T7993] bridge3: entered allmulticast mode [ 106.837463][ T7993] bond1: (slave bridge3): Enslaving as a backup interface with an up link [ 106.861400][ T3616] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 106.864638][ T7994] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2996: inode #15: comm syz.0.1345: mark_inode_dirty error [ 106.884042][ T7994] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2999: inode #15: comm syz.0.1345: mark inode dirty (error -117) [ 106.906265][ T7994] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 106.916065][ T7994] EXT4-fs (loop0): 1 orphan inode deleted [ 106.926220][ T7994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.945693][ T8003] netlink: 2172 bytes leftover after parsing attributes in process `syz.4.1349'. [ 106.949692][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.981547][ T8007] loop5: detected capacity change from 0 to 164 [ 106.989101][ T8007] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 106.997831][ T3596] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 107.009967][ T8007] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 107.051361][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.093438][ T8013] loop2: detected capacity change from 0 to 2048 [ 107.154416][ T3308] Alternate GPT is invalid, using primary GPT. [ 107.160925][ T3308] loop2: p2 p3 p7 [ 107.204089][ T8013] Alternate GPT is invalid, using primary GPT. [ 107.210773][ T8013] loop2: p2 p3 p7 [ 107.298327][ T8026] loop2: detected capacity change from 0 to 128 [ 107.347578][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 107.348059][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 107.368258][ T5384] udevd[5384]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 107.380392][ T8026] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 107.425451][ T8035] netlink: 'syz.5.1361': attribute type 1 has an invalid length. [ 107.445717][ T8033] syzkaller0: entered promiscuous mode [ 107.451298][ T8033] syzkaller0: entered allmulticast mode [ 107.504662][ T8035] bond2: (slave bridge4): making interface the new active one [ 107.513614][ T8035] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 107.523833][ T3320] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 107.545811][ T8039] loop2: detected capacity change from 0 to 512 [ 107.568919][ T8039] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.667947][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.777249][ T8058] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 107.820247][ T8061] loop0: detected capacity change from 0 to 2048 [ 107.868111][ T5384] Alternate GPT is invalid, using primary GPT. [ 107.874841][ T5384] loop0: p2 p3 p7 [ 107.905442][ T8061] Alternate GPT is invalid, using primary GPT. [ 107.912109][ T8061] loop0: p2 p3 p7 [ 107.915286][ T8068] loop4: detected capacity change from 0 to 128 [ 107.940884][ T8068] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.040380][ T8075] netlink: 'syz.2.1379': attribute type 1 has an invalid length. [ 108.063255][ T5384] udevd[5384]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 108.063732][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 108.083473][ T5386] udevd[5386]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory [ 108.102579][ T8075] bond2: (slave bridge2): making interface the new active one [ 108.110442][ T8075] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 108.121068][ T3323] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.182440][ T8082] pim6reg1: entered promiscuous mode [ 108.187831][ T8082] pim6reg1: entered allmulticast mode [ 108.218805][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 108.218876][ T29] audit: type=1326 audit(108.199:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8088 comm="syz.2.1383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x0 [ 108.289640][ T8094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1384'. [ 108.330140][ T8096] netlink: 'syz.4.1385': attribute type 13 has an invalid length. [ 108.344306][ T29] audit: type=1107 audit(108.319:2129): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 108.588242][ T29] audit: type=1326 audit(108.569:2130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.611394][ T29] audit: type=1326 audit(108.569:2131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.665782][ T29] audit: type=1326 audit(108.569:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=6 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.688658][ T29] audit: type=1326 audit(108.569:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.711650][ T29] audit: type=1326 audit(108.569:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.734522][ T29] audit: type=1326 audit(108.569:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.757456][ T29] audit: type=1326 audit(108.569:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.780424][ T29] audit: type=1326 audit(108.569:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8110 comm="syz.0.1390" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f076b53f749 code=0x7ffc0000 [ 108.806323][ T8118] loop0: detected capacity change from 0 to 1764 [ 108.895861][ T8123] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.919966][ T8125] pim6reg1: entered promiscuous mode [ 108.925443][ T8125] pim6reg1: entered allmulticast mode [ 108.926580][ T8123] netlink: 'syz.0.1398': attribute type 10 has an invalid length. [ 108.938827][ T8123] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1398'. [ 108.951142][ T8123] veth1_vlan: left promiscuous mode [ 108.957589][ T8123] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 109.074599][ T8132] netlink: 'syz.1.1401': attribute type 13 has an invalid length. [ 109.103397][ T8132] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 109.202798][ T3596] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.211593][ T3596] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.229792][ T3596] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.242228][ T3596] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.805794][ T8163] pim6reg1: entered promiscuous mode [ 109.811212][ T8163] pim6reg1: entered allmulticast mode [ 109.830458][ T8160] loop2: detected capacity change from 0 to 1764 [ 109.912691][ T8169] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1417'. [ 109.924734][ T8171] loop2: detected capacity change from 0 to 128 [ 110.051455][ T8182] syzkaller1: entered promiscuous mode [ 110.057015][ T8182] syzkaller1: entered allmulticast mode [ 110.190376][ T8191] loop1: detected capacity change from 0 to 512 [ 110.199758][ T8191] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1427: bg 0: block 5: invalid block bitmap [ 110.215227][ T8191] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 110.224597][ T8191] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1427: invalid indirect mapped block 3 (level 2) [ 110.240728][ T8191] EXT4-fs (loop1): 2 truncates cleaned up [ 110.250792][ T8191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.263575][ T8194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1425'. [ 110.280440][ T8191] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.312421][ T8194] team1: entered promiscuous mode [ 110.317548][ T8194] team1: entered allmulticast mode [ 110.326646][ T8194] 8021q: adding VLAN 0 to HW filter on device team1 [ 110.437866][ T8204] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 110.472433][ T8207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1443'. [ 110.495768][ T8207] team3: entered promiscuous mode [ 110.500879][ T8207] team3: entered allmulticast mode [ 110.517750][ T8207] 8021q: adding VLAN 0 to HW filter on device team3 [ 110.572338][ T8212] loop0: detected capacity change from 0 to 256 [ 111.293393][ T8248] tipc: Enabled bearer , priority 0 [ 111.300905][ T8246] tipc: Resetting bearer [ 111.324202][ T8246] tipc: Disabling bearer [ 111.547801][ T8264] loop0: detected capacity change from 0 to 512 [ 111.555145][ T8264] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 111.567402][ T8264] EXT4-fs (loop0): 1 truncate cleaned up [ 111.567911][ T8264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.970532][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1458'. [ 112.132367][ T8289] loop4: detected capacity change from 0 to 512 [ 112.135096][ T8289] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.1473: bg 0: block 5: invalid block bitmap [ 112.135480][ T8289] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 112.135660][ T8289] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1473: invalid indirect mapped block 3 (level 2) [ 112.136000][ T8289] EXT4-fs (loop4): 2 truncates cleaned up [ 112.146598][ T8289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.154562][ T8289] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.230720][ T8292] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1462'. [ 112.332480][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.368089][ T8303] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 112.664221][ T8327] loop0: detected capacity change from 0 to 512 [ 112.669111][ T8327] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.1478: bg 0: block 5: invalid block bitmap [ 112.669394][ T8327] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 112.669581][ T8327] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1478: invalid indirect mapped block 3 (level 2) [ 112.669800][ T8327] EXT4-fs (loop0): 2 truncates cleaned up [ 112.670329][ T8327] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.684950][ T8327] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.818914][ T8335] loop0: detected capacity change from 0 to 1024 [ 112.819421][ T8335] EXT4-fs: Ignoring removed nomblk_io_submit option [ 112.853591][ T8335] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.917000][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.033970][ T8353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.034005][ T8353] IPv6: NLM_F_CREATE should be set when creating new route [ 113.034016][ T8353] IPv6: NLM_F_CREATE should be set when creating new route [ 113.034073][ T8353] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 113.534664][ T8389] loop0: detected capacity change from 0 to 512 [ 113.597939][ T8389] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.692583][ T8407] pim6reg1: entered promiscuous mode [ 113.697891][ T3314] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.698401][ T8407] pim6reg1: entered allmulticast mode [ 113.881390][ T29] kauditd_printk_skb: 94 callbacks suppressed [ 113.881407][ T29] audit: type=1400 audit(113.859:2232): avc: denied { read open } for pid=8425 comm="syz.0.1509" path="/" dev="configfs" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 114.160502][ T29] audit: type=1400 audit(114.139:2233): avc: denied { read } for pid=8465 comm="syz.4.1505" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.184157][ T29] audit: type=1400 audit(114.139:2234): avc: denied { open } for pid=8465 comm="syz.4.1505" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 114.211130][ T8466] ip6tnl0: entered promiscuous mode [ 114.216448][ T8466] ip6tnl0: entered allmulticast mode [ 114.417109][ T29] audit: type=1326 audit(114.399:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 114.440014][ T29] audit: type=1326 audit(114.399:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 114.462862][ T29] audit: type=1326 audit(114.399:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 114.485719][ T29] audit: type=1326 audit(114.399:2238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 114.508551][ T29] audit: type=1326 audit(114.399:2239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 114.531468][ T29] audit: type=1326 audit(114.399:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 114.558559][ T29] audit: type=1326 audit(114.399:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8484 comm="syz.1.1507" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 114.582037][ T8493] wg2: left promiscuous mode [ 114.586668][ T8493] wg2: left allmulticast mode [ 114.597234][ T8493] wg2: entered promiscuous mode [ 114.602314][ T8493] wg2: entered allmulticast mode [ 114.754712][ T8526] pim6reg1: entered promiscuous mode [ 114.760092][ T8526] pim6reg1: entered allmulticast mode [ 114.942986][ T8510] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1514'. [ 115.126543][ T8579] ip6tnl0: entered promiscuous mode [ 115.132104][ T8579] ip6tnl0: entered allmulticast mode [ 115.139970][ T8578] loop5: detected capacity change from 0 to 512 [ 115.162148][ T8578] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1522: bg 0: block 5: invalid block bitmap [ 115.201712][ T8578] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6667: Corrupt filesystem [ 115.212763][ T8578] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.1522: invalid indirect mapped block 3 (level 2) [ 115.231437][ T8578] EXT4-fs (loop5): 2 truncates cleaned up [ 115.239724][ T8578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.253581][ T8578] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.316581][ T8591] netlink: 'syz.0.1537': attribute type 13 has an invalid length. [ 115.431160][ T8599] loop2: detected capacity change from 0 to 2048 [ 115.461696][ T5384] loop2: p1 < > p4 [ 115.466303][ T5384] loop2: p4 size 8388608 extends beyond EOD, truncated [ 115.476386][ T8599] loop2: p1 < > p4 [ 115.480835][ T8599] loop2: p4 size 8388608 extends beyond EOD, truncated [ 115.554545][ T8610] SELinux: Context /usr/sbin/cupsd is not valid (left unmapped). [ 115.576236][ T5384] udevd[5384]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 115.616831][ T8616] loop5: detected capacity change from 0 to 512 [ 115.649368][ T8621] ip6tnl0: entered promiscuous mode [ 115.654748][ T8621] ip6tnl0: entered allmulticast mode [ 115.671838][ T8616] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 115.726148][ T8616] EXT4-fs (loop5): 1 truncate cleaned up [ 115.745420][ T8616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.404206][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.730597][ T8667] loop4: detected capacity change from 0 to 128 [ 116.739501][ T8667] bio_check_eod: 79 callbacks suppressed [ 116.739519][ T8667] syz.4.1558: attempt to access beyond end of device [ 116.739519][ T8667] loop4: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 116.983307][ T8687] veth4: entered promiscuous mode [ 116.988419][ T8687] veth4: entered allmulticast mode [ 117.016171][ T8683] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 117.169759][ T8710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.177051][ T8710] IPv6: NLM_F_CREATE should be set when creating new route [ 117.184391][ T8710] IPv6: NLM_F_CREATE should be set when creating new route [ 117.196732][ T8710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.239974][ T8717] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1574'. [ 117.249325][ T8717] hsr_slave_0: left promiscuous mode [ 117.441327][ T8729] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 117.521432][ T8731] syzkaller0: entered allmulticast mode [ 117.544069][ T8731] syzkaller0: entered promiscuous mode [ 117.558788][ T8731] syzkaller0 (unregistering): left allmulticast mode [ 117.565585][ T8731] syzkaller0 (unregistering): left promiscuous mode [ 117.572598][ T8735] netlink: 'syz.1.1586': attribute type 13 has an invalid length. [ 117.624035][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 117.633066][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 117.642589][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 117.660245][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 117.669300][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 117.680747][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1588'. [ 117.771066][ T8755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.778354][ T8755] IPv6: NLM_F_CREATE should be set when creating new route [ 117.785853][ T8755] IPv6: NLM_F_CREATE should be set when creating new route [ 117.803226][ T8757] loop5: detected capacity change from 0 to 1024 [ 117.808466][ T8755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.819498][ T8757] EXT4-fs: inline encryption not supported [ 117.825504][ T8757] EXT4-fs: Ignoring removed orlov option [ 117.846666][ T8762] loop1: detected capacity change from 0 to 512 [ 117.866190][ T8757] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 117.886454][ T8767] loop0: detected capacity change from 0 to 128 [ 117.895616][ T8767] syz.0.1598: attempt to access beyond end of device [ 117.895616][ T8767] loop0: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 117.919693][ T8757] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 117.920087][ T8762] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.931844][ T8757] System zones: 0-1, 3-12 [ 117.945762][ T8757] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.978872][ T8757] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 117.991327][ T8757] EXT4-fs (loop5): This should not happen!! Data will be lost [ 117.991327][ T8757] [ 118.001012][ T8757] EXT4-fs (loop5): Total free blocks count 0 [ 118.004844][ T8774] veth8: entered promiscuous mode [ 118.007205][ T8757] EXT4-fs (loop5): Free/Dirty block details [ 118.012348][ T8774] veth8: entered allmulticast mode [ 118.018104][ T8757] EXT4-fs (loop5): free_blocks=0 [ 118.028241][ T8757] EXT4-fs (loop5): dirty_blocks=0 [ 118.033368][ T8757] EXT4-fs (loop5): Block reservation details [ 118.039366][ T8757] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 118.060295][ T8777] atomic_op ffff88811b9bf528 conn xmit_atomic 0000000000000000 [ 118.091758][ T5388] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.145274][ T3318] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.349868][ T8810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.357176][ T8810] IPv6: NLM_F_CREATE should be set when creating new route [ 118.364415][ T8810] IPv6: NLM_F_CREATE should be set when creating new route [ 118.372337][ T8810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.414020][ T8813] veth10: entered promiscuous mode [ 118.419323][ T8813] veth10: entered allmulticast mode [ 118.545814][ T8822] loop2: detected capacity change from 0 to 512 [ 118.562736][ T8822] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.606832][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.698909][ T8838] syzkaller0: entered promiscuous mode [ 118.704575][ T8838] syzkaller0: entered allmulticast mode [ 118.808563][ T8840] loop2: detected capacity change from 0 to 128 [ 118.817521][ T8840] syz.2.1627: attempt to access beyond end of device [ 118.817521][ T8840] loop2: rw=2051, sector=104, nr_sectors = 937 limit=128 [ 118.845078][ T8832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.854086][ T8832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.974828][ T8851] veth2: entered promiscuous mode [ 118.979930][ T8851] veth2: entered allmulticast mode [ 119.825013][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 119.825030][ T29] audit: type=1326 audit(119.809:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8854 comm="syz.2.1632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f721a09f749 code=0x0 [ 119.882961][ T8862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.890269][ T8862] IPv6: NLM_F_CREATE should be set when creating new route [ 119.897704][ T8862] IPv6: NLM_F_CREATE should be set when creating new route [ 119.919881][ T8862] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.953246][ T8872] __nla_validate_parse: 7 callbacks suppressed [ 119.953264][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 119.968710][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 119.977909][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 119.988226][ T8876] netlink: 'syz.1.1649': attribute type 12 has an invalid length. [ 120.006587][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 120.015675][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 120.025240][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1639'. [ 120.039275][ T29] audit: type=1326 audit(120.019:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 120.067313][ T29] audit: type=1326 audit(120.019:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 120.090405][ T29] audit: type=1326 audit(120.049:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 120.113239][ T29] audit: type=1326 audit(120.049:2385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 120.136281][ T29] audit: type=1326 audit(120.049:2386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 120.165920][ T29] audit: type=1326 audit(120.149:2387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 120.189123][ T29] audit: type=1326 audit(120.149:2388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8881 comm="syz.1.1641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21de32f749 code=0x7ffc0000 [ 120.273268][ T29] audit: type=1400 audit(120.259:2389): avc: denied { ioctl } for pid=8889 comm="syz.0.1644" path="socket:[22575]" dev="sockfs" ino=22575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 120.333139][ T8894] lo: Caught tx_queue_len zero misconfig [ 120.466320][ T3004] ================================================================== [ 120.474470][ T3004] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 120.481713][ T3004] [ 120.484108][ T3004] write to 0xffff888106e4e1b0 of 8 bytes by task 3308 on cpu 0: [ 120.491776][ T3004] dentry_unlink_inode+0x65/0x260 [ 120.496820][ T3004] d_delete+0x164/0x180 [ 120.500996][ T3004] d_delete_notify+0x32/0x100 [ 120.505689][ T3004] vfs_unlink+0x30b/0x420 [ 120.510031][ T3004] do_unlinkat+0x24e/0x480 [ 120.514462][ T3004] __x64_sys_unlink+0x2e/0x40 [ 120.519155][ T3004] x64_sys_call+0x2dcf/0x3000 [ 120.523845][ T3004] do_syscall_64+0xd2/0x200 [ 120.528383][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.534287][ T3004] [ 120.536613][ T3004] read to 0xffff888106e4e1b0 of 8 bytes by task 3004 on cpu 1: [ 120.544159][ T3004] step_into+0x122/0x7f0 [ 120.548418][ T3004] walk_component+0x162/0x220 [ 120.553123][ T3004] path_lookupat+0xfe/0x2a0 [ 120.557647][ T3004] filename_lookup+0x147/0x340 [ 120.562433][ T3004] do_readlinkat+0x7d/0x320 [ 120.566947][ T3004] __x64_sys_readlink+0x47/0x60 [ 120.571802][ T3004] x64_sys_call+0x28de/0x3000 [ 120.576493][ T3004] do_syscall_64+0xd2/0x200 [ 120.581009][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.586910][ T3004] [ 120.589261][ T3004] value changed: 0xffff8881193a34d0 -> 0x0000000000000000 [ 120.596367][ T3004] [ 120.598691][ T3004] Reported by Kernel Concurrency Sanitizer on: [ 120.604869][ T3004] CPU: 1 UID: 0 PID: 3004 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 120.614254][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 120.624321][ T3004] ================================================================== [ 120.635582][ T8907] loop4: detected capacity change from 0 to 1024 [ 120.643096][ T8907] EXT4-fs: inline encryption not supported [ 120.649036][ T8907] EXT4-fs: Ignoring removed orlov option [ 120.671557][ T8907] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 120.692658][ T8907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c019, mo2=0002] [ 120.700989][ T8907] System zones: 0-1, 3-12 [ 120.706180][ T8907] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.728879][ T8907] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 120.741394][ T8907] EXT4-fs (loop4): This should not happen!! Data will be lost [ 120.741394][ T8907] [ 120.751044][ T8907] EXT4-fs (loop4): Total free blocks count 0 [ 120.757073][ T8907] EXT4-fs (loop4): Free/Dirty block details [ 120.763180][ T8907] EXT4-fs (loop4): free_blocks=0 [ 120.768210][ T8907] EXT4-fs (loop4): dirty_blocks=0 [ 120.773373][ T8907] EXT4-fs (loop4): Block reservation details [ 120.779463][ T8907] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 120.798229][ T3323] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.