last executing test programs: 49.18221594s ago: executing program 3 (id=1302): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000000)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f00000001c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x1, 0x3, 0x3, 0x81, @b={0xf9, 0x6, 0x1, 0x2, {0x7b, "bb68068b798aa308535ba4afd02b09a0be4990f24e234bb6aa202e0e7c57e69d86b8c04f7e5b1afe43a804214463b3301991453b34759b2797a403baccd1638903255dea1da2466fceaac629f6e8f4d837fb05d3fe3d144f23e9ec4b03ca86b4bc6ff0f7947b90a54d0ddfd36ba6d58f7b4dad491513481da49073"}, 0x1}}, 0x84) 48.323428778s ago: executing program 3 (id=1348): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xfffffffc, @empty, 0x4}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) readv(r0, &(0x7f0000002680)=[{&(0x7f0000000140)=""/19, 0x13}, {0x0, 0x26}, {&(0x7f0000000380)=""/100, 0x64}], 0x3) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x1c, 0x0, @opaque="3cf5a5c50042ea80316fd116a12442758162abb2"}}}}}, 0x0) 47.475730256s ago: executing program 3 (id=1377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x3, 0x7fff0006}]}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 47.450833138s ago: executing program 3 (id=1380): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x100) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 47.370692505s ago: executing program 3 (id=1384): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$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") r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000340)='mm_page_free\x00', r1, 0x0, 0x100000002}, 0x18) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r2, r2, 0x0, 0x800000009) 47.125295054s ago: executing program 3 (id=1398): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 47.111606546s ago: executing program 32 (id=1398): creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 46.466179737s ago: executing program 4 (id=1426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000000)={0x4b5a9da54893e123, 0x14, 0x8, 0x2}, 0x8, 0x7, 0x200, 0x0, 0x0, 0x0, 0x0}) r2 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$selinux_load(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e757813"], 0x65) 46.288129331s ago: executing program 4 (id=1429): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2e, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 46.147182883s ago: executing program 4 (id=1430): setrlimit(0x9, &(0x7f0000000380)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000006c0)='kfree\x00', r1}, 0x18) io_setup(0x2004, &(0x7f0000000680)) 46.082684268s ago: executing program 4 (id=1435): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x0, 0x100) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 45.922702101s ago: executing program 4 (id=1438): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x2005c013}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x24000880}, 0x800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 45.620002565s ago: executing program 4 (id=1450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000a00)="e8", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) 45.585617448s ago: executing program 33 (id=1450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x1}, &(0x7f0000000a00)="e8", 0x1, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000580)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r2, r3, 0x0) 2.022140547s ago: executing program 1 (id=3330): bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000900)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 1.816681824s ago: executing program 1 (id=3329): r0 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r4, 0x0, &(0x7f00000001c0)={0x0, 0xffffffffffffff3d, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x94}, 0x0, 0x40000103}) io_uring_enter(r0, 0x46f3, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000001400)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000680)=""/84, 0x54}], 0x1}}], 0x1, 0x40000000, 0x0) write(r3, 0x0, 0x0) 1.75232475s ago: executing program 6 (id=3332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.62394357s ago: executing program 6 (id=3334): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000001c00)=[&(0x7f0000000400)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) 1.455161033s ago: executing program 6 (id=3336): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6102020701011004df92926ae9"], 0xd) 1.027792368s ago: executing program 5 (id=3348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 949.233553ms ago: executing program 5 (id=3349): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) 788.508687ms ago: executing program 1 (id=3351): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f0000000600)=0x0, &(0x7f00000005c0)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FADVISE={0x18, 0x28, 0x0, @fd, 0x8, 0x0, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 690.723774ms ago: executing program 1 (id=3356): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 687.926655ms ago: executing program 0 (id=3357): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x101, 0x7ffc, 0xcc}, 0x50) 622.43287ms ago: executing program 1 (id=3358): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 588.130233ms ago: executing program 0 (id=3361): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) r1 = dup(r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f3bbb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68000000000000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465a932b77a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900ff0000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af740b5b7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48bc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd3170400000085be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890cec55bf404e4e1f74b7eed82571be54c72d978cf906df08f11f1c4042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9f0390a6f01e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5eaff07000000000000b99c9cc0ad1857216f000000009191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a798de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270b939b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf01cfaed9ef0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546bb2e51935ab9067ec3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f626602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df902aeec50e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd6d89f80a4377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f000000000100000000d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fb03b84f63e022fe755f4007a4a899eaf52c4f491f1e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c7167d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c2499ce3ffe2fef03f7cdd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba3c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63e4581d5cc41cbde2ba66adc1168070c8c6e18a6a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c3340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b909006f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f1400010000ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1b0100448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f949170ef8cb9c13c12138116bca7a8c59363799be7005c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2c74664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677eff7c5c568a89d6e36b165c39132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae1676384ff799783f55d7e5a1a0920300000000000000d98440c355927629f2bcf9dc405a18ca0264400abf38e90000000000000000008faf2cddffbfa69bf32eb718e88ec75603ed7c7a8825ce0f27a114bd7a4ab74d0c7b8d90ccc1c3ca6620def782e24d75aed70eb676437f62677a69e0994cd82d72e95493c830fe9515329f40b7025326dec33a527c5d999298eaa3690fd0d38a02fc6e0bc16dbe19f353027edc014411e1138087221492f5d5e5cc9d0a1acd3f581eda9a807aa0e609f935f626d96351e0ff116686cbeb8939feecd5dac8cf45101942cc7cec21b7f337df5431bcf7e504b7c427f70a10e1cb8993a661306a0576b638a0171e6800b5b35589d676eb30ed1a72e8f7b057eb281c4504195635b6b285ebaba019913a2520e43ed790231f047f7d3789c10ae7d724929f77aec1d33d9587580268ee14396f71e7ef588cb2560d6bd0795a9b97281229eb16de086553469fad7214ffc3e416f8b8e442dce1d37f9b1c88a5d8a8d9f2fe45bd8df213ecb4194c8554aea13cadcd502e51f6fec80418e772b5bd8d0228949058038b185909ee542848680f9ad43f4057d676d5e21ae3d7e0e4a28c04f112a94707f032b35915e42993ff148291b8babe026646ee41905992db217561b90811c4702a14f312fe5d2ae7257db6be1034cc1c346b76a853ce274bf0435e18f7e86c660c18c80f30505dd4cf2ae2a1893b83c62d61bfeadc1f913e4cab2b897e096dd3fe3525090410cb23bab36cdf200a36014032cf6e5121803c5a0c4a273a19f340163fc6265425d513a1294b8439276394945d94a589708e32a1cb30f1fa4b2f08e01dc5e8c6732e6dc59b5c8cb400000000000000592c9b68f09c8f5ddb20b4ae08b4d9df548e5ed6cd47b91a4bea8b6aa52edf64576aef1e43f2958437fdc20fbbd0d4e13d8cce1193b2f9b4f107e25af178d056e1b1e40bd75b013f7484fae0bc447b1ffaf34819fe3ad1a634c94345e26e1e68dec08723a37b05d1594a66a4718a51d4d67fc880c9d640f4eacc509873f1a103c87f69"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 587.769013ms ago: executing program 1 (id=3362): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xfd, 0x1bf, &(0x7f0000000300)="$eJzs3TGL02AYB/Cn9bzmnG4TRCHg4nSon+BEThADgtJBJ4XT5SqCt0SX9mP4Af0A0qmLRGrSxkaHWmxS6++39En/edvnHZp26ZNXN99dnL+/fPvl+udIkl70T+M0Zr04jn4sTAIA2CezooivRanrXgCAdqzx/f+t5ZYAgC17/uLlkwdZdvYsTZOI6SQf5sPyscwfPc7O7qY/HNerpnk+vLLM76XN3w7z/Gpcq/L75fp0NT+MO7fLfJ49fJo18kGcb3frAAAAAAAAAAAAAAAAAAAAAADQmVuRLvx2vs/JSTM/qvLy6Kf5QI35PQdx46A6rMcDFeM2NgUAAAAAAAAAAAAAAAAAAAD/mMuPny5ej0ZvPtTFICJWn/mTole98IbL2y76sRNtKP5qke5GG6MNPwWHEbGtxmZFUax1cn2NGHR1cQIAAAAAAAAAAAAAAAAAgP9M/affX7Oki4YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoAP1/f83KMYRscbJyzc76nSrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA7LHvAQAA///DgjXa") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf5", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 561.341335ms ago: executing program 0 (id=3364): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) r1 = syz_io_uring_setup(0x9ee, &(0x7f00000003c0)={0x0, 0xc95c, 0x100, 0x3, 0xfffffffe}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x5745, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) 527.184048ms ago: executing program 2 (id=3365): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000040000020f00000005002e000100000005002f000000000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 523.599638ms ago: executing program 6 (id=3366): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) pwritev2(r0, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2a) pwrite64(r1, &(0x7f0000000140)='2', 0x2c, 0x8000c61) 522.976748ms ago: executing program 5 (id=3367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000680), 0x1, 0x0) write$selinux_validatetrans(r2, 0x0, 0x79) 457.610743ms ago: executing program 2 (id=3368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'dvmrp0\x00', 0xe43986f95b0e4309}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x700, 0x1, 0xffffffff, 0x5, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x9, 0x4, 0x0, @remote, @broadcast}}}}) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x2, 0x1, @vifc_lcl_ifindex=r3, @multicast1}, 0x10) 457.010813ms ago: executing program 5 (id=3378): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000400)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x564, &(0x7f0000000c00)="$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") openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)={0x62941, 0x2, 0x10}, 0x18) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1e2) mknodat(0xffffffffffffff9c, &(0x7f0000000200)='./file1/file4/file5\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file4/file5\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', 0x2) 385.791219ms ago: executing program 6 (id=3369): write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="61123000000000006113100000000000bf2020000000000016000200071b48013f030100000000009500000000000000bc26000000000000bf67000000000000070200000fff07006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 382.626219ms ago: executing program 0 (id=3380): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 373.90616ms ago: executing program 2 (id=3370): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000004000000450000008814"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000300000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="14000000ed03010000000000000000000000000a1400"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 295.570046ms ago: executing program 2 (id=3371): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') write$nci(r1, 0x0, 0xfffffeea) 261.794119ms ago: executing program 0 (id=3372): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc010000000a05000000000000000000010000000900010073797a3000000000d30006003407ae8929b5d5805c2cb15c6832bdf04f6f732bf6c75790a071b67033b0bb7e81aac8c9ccb093263d99fcafa58fe6c7126fc1d2ccbc1888abd4a61e1818723b358b147b8836997950921d849981687e7eb599e28bd439758eefcbda6f7906db339e68d3869e4011ddfb254a2dda9b523f928b3626f8faa75357d4f9cb925df5cde675f9e8bb05e4f8cc9a0610fb2945b1b755b94883afb3697a7535ea5f9db3ce21c1f0cc3fb343e830c6a947f512c56b1a706b86e76bc58a075f7cb0322f7fa6fb5df1718361423df5cbd47608ca000900010073797a310000000008000240000000030c000440000000000000000499000600db2b252f3c9b3b419bda841c524cb69270214a733fee6d8e10561ce9d682ad271b8a317d699b2f000178b2aca7c7058e0df489887ebdcf11c4ddf03bc9b1284f5fb568bac9b64b06c9d8c2acf08c892fb2abeb7c72bc9c8fa0c7425b5aa3df8074d8412d67fad836b6cc1c0be2fff19dbd1830e29ae4bc6aaa4f42c244e40238dc8e2a247b1792a177693b55dc155f631634db5af90000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b40000000005c000480580001800b000100746172676574000048000280300003005fad843dc5c1efe84ced18d4422d5b0b86e8441958d3d2ea41149f1e55359af069a2a5e039ccf56f068a5a0b09000100534e41540000000008000240000000020900010073797a30"], 0x2a8}, 0x1, 0x0, 0x0, 0x84}, 0x0) 183.024935ms ago: executing program 5 (id=3373): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet6(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x5}}, @int={0xfffffffd, 0x0, 0x0, 0x1, 0x5, 0x20}]}}, 0x0, 0x42}, 0x28) 129.022979ms ago: executing program 0 (id=3374): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0xff}, 0x18) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x48}, 0x0) 128.397549ms ago: executing program 2 (id=3375): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a51080002"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 48.979216ms ago: executing program 5 (id=3376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x33) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{r1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f00000000c0)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x25, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r3}, 0x10) 48.525046ms ago: executing program 2 (id=3377): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000540), 0x84) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x20e, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x8, 0x0, 0x20000002}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 0s ago: executing program 6 (id=3379): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, 0x0, 0x1ff) sendfile(r1, r1, 0x0, 0x9) kernel console output (not intermixed with test programs): ate [ 63.692915][ T29] kauditd_printk_skb: 344 callbacks suppressed [ 63.692928][ T29] audit: type=1400 audit(63.675:2017): avc: denied { write } for pid=6839 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.703014][ T6841] netlink: 268 bytes leftover after parsing attributes in process `syz.4.1419'. [ 63.718906][ T29] audit: type=1400 audit(63.685:2018): avc: denied { nlmsg_write } for pid=6839 comm="syz.4.1419" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 63.727626][ T6841] unsupported nla_type 65024 [ 63.773243][ T29] audit: type=1400 audit(63.755:2019): avc: denied { write } for pid=6844 comm="syz.0.1421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 63.878272][ T6853] SELinux: failed to load policy [ 63.902208][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.912192][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.921638][ T31] bond0 (unregistering): Released all slaves [ 63.929628][ T31] bond1 (unregistering): Released all slaves [ 63.937767][ T31] bond2 (unregistering): Released all slaves [ 63.973349][ T31] hsr_slave_0: left promiscuous mode [ 63.979137][ T31] hsr_slave_1: left promiscuous mode [ 63.986018][ T29] audit: type=1326 audit(63.965:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28641ebe9 code=0x7ffc0000 [ 64.010154][ T29] audit: type=1326 audit(63.965:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7fd28641ebe9 code=0x7ffc0000 [ 64.013895][ T6862] SELinux: failed to load policy [ 64.032883][ T29] audit: type=1326 audit(63.965:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28641ebe9 code=0x7ffc0000 [ 64.060908][ T29] audit: type=1326 audit(64.015:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6859 comm="syz.2.1425" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28641ebe9 code=0x7ffc0000 [ 64.084279][ T31] veth1_macvtap: left promiscuous mode [ 64.089756][ T31] veth0_macvtap: left promiscuous mode [ 64.095501][ T31] veth1_vlan: left promiscuous mode [ 64.101074][ T31] veth0_vlan: left promiscuous mode [ 64.185296][ T31] team0 (unregistering): Port device team_slave_1 removed [ 64.199155][ T31] team0 (unregistering): Port device team_slave_0 removed [ 64.249606][ T6865] bond1: entered promiscuous mode [ 64.254875][ T6865] bond1: entered allmulticast mode [ 64.262231][ T6865] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.286547][ T6865] bond1 (unregistering): Released all slaves [ 64.299573][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.306776][ T6804] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.318771][ T6876] SELinux: failed to load policy [ 64.346632][ T6804] bridge_slave_0: entered allmulticast mode [ 64.354139][ T29] audit: type=1400 audit(64.335:2024): avc: denied { create } for pid=6877 comm="syz.0.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.356355][ T6880] loop4: detected capacity change from 0 to 512 [ 64.379701][ T6804] bridge_slave_0: entered promiscuous mode [ 64.386676][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.393864][ T6804] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.401736][ T6804] bridge_slave_1: entered allmulticast mode [ 64.406525][ T29] audit: type=1400 audit(64.355:2025): avc: denied { write } for pid=6877 comm="syz.0.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 64.410226][ T6880] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 64.448039][ T6804] bridge_slave_1: entered promiscuous mode [ 64.459453][ T6880] EXT4-fs (loop4): 1 truncate cleaned up [ 64.473169][ T6804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.483523][ T6804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.504402][ T6804] team0: Port device team_slave_0 added [ 64.505458][ T3301] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 54: comm syz-executor: path /283/file2/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 64.511117][ T6804] team0: Port device team_slave_1 added [ 64.541946][ T3301] EXT4-fs (loop4): Remounting filesystem read-only [ 64.558685][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.565708][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.591601][ T6804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.611128][ T6804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.618157][ T6804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.644097][ T6804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.671803][ T29] audit: type=1326 audit(64.635:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6894 comm="syz.1.1439" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 64.751810][ T6804] hsr_slave_0: entered promiscuous mode [ 64.753344][ T6905] SELinux: failed to load policy [ 64.757974][ T6804] hsr_slave_1: entered promiscuous mode [ 64.773019][ T6804] debugfs: 'hsr0' already exists in 'hsr' [ 64.778769][ T6804] Cannot create hsr debugfs directory [ 64.788071][ T6909] lo speed is unknown, defaulting to 1000 [ 64.794292][ T6909] lo speed is unknown, defaulting to 1000 [ 64.800233][ T6909] lo speed is unknown, defaulting to 1000 [ 64.812317][ T6909] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.821022][ T6909] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 64.831451][ T6911] SELinux: failed to load policy [ 64.853148][ T6909] lo speed is unknown, defaulting to 1000 [ 64.878923][ T6909] lo speed is unknown, defaulting to 1000 [ 64.889873][ T6909] lo speed is unknown, defaulting to 1000 [ 64.909332][ T6909] lo speed is unknown, defaulting to 1000 [ 64.921302][ T6909] lo speed is unknown, defaulting to 1000 [ 64.933958][ T6804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.950296][ T6804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.958894][ T6804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.967811][ T6804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.983548][ T6918] lo speed is unknown, defaulting to 1000 [ 64.987397][ T6804] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.996369][ T6804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.003708][ T6804] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.010749][ T6804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.020967][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.028569][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.088541][ T6804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.097951][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 65.126050][ T6804] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.142317][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.149401][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.156983][ T6918] bridge_slave_0: entered allmulticast mode [ 65.163485][ T6918] bridge_slave_0: entered promiscuous mode [ 65.173710][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.180868][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.187966][ T6918] bridge_slave_1: entered allmulticast mode [ 65.194398][ T6918] bridge_slave_1: entered promiscuous mode [ 65.206589][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.213701][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.222516][ T3436] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.229539][ T3436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.244682][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.261033][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.287115][ T6918] team0: Port device team_slave_0 added [ 65.293981][ T6918] team0: Port device team_slave_1 added [ 65.312850][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.319802][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.345812][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.357451][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.364413][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.390315][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.421018][ T6918] hsr_slave_0: entered promiscuous mode [ 65.427019][ T6918] hsr_slave_1: entered promiscuous mode [ 65.432785][ T6918] debugfs: 'hsr0' already exists in 'hsr' [ 65.438492][ T6918] Cannot create hsr debugfs directory [ 65.466372][ T31] bridge_slave_1: left allmulticast mode [ 65.472103][ T31] bridge_slave_1: left promiscuous mode [ 65.477840][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.485671][ T31] bridge_slave_0: left allmulticast mode [ 65.491587][ T31] bridge_slave_0: left promiscuous mode [ 65.497278][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.552067][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.561786][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.570794][ T31] bond0 (unregistering): Released all slaves [ 65.578663][ T31] bond1 (unregistering): Released all slaves [ 65.622565][ T31] hsr_slave_0: left promiscuous mode [ 65.628209][ T31] hsr_slave_1: left promiscuous mode [ 65.656281][ T31] team0 (unregistering): Port device team_slave_1 removed [ 65.665638][ T31] team0 (unregistering): Port device team_slave_0 removed [ 65.695539][ T6804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.719274][ T6945] loop1: detected capacity change from 0 to 1024 [ 65.735501][ T6918] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 65.759347][ T6918] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 65.772580][ T6918] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 65.788289][ T6918] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 65.896808][ T6918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.912813][ T6918] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.923820][ T6979] SELinux: failed to load policy [ 65.948373][ T2134] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.955538][ T2134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.971930][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.979362][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.999979][ T6804] veth0_vlan: entered promiscuous mode [ 66.019997][ T6804] veth1_vlan: entered promiscuous mode [ 66.043221][ T6804] veth0_macvtap: entered promiscuous mode [ 66.055361][ T6804] veth1_macvtap: entered promiscuous mode [ 66.066576][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.077170][ T6804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.089244][ T3436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.101248][ T3436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.135267][ T3436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.150682][ T6918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.168049][ T6996] loop0: detected capacity change from 0 to 1024 [ 66.175682][ T3436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.294107][ T7028] validate_nla: 1 callbacks suppressed [ 66.294122][ T7028] netlink: 'syz.5.1477': attribute type 3 has an invalid length. [ 66.299883][ T6918] veth0_vlan: entered promiscuous mode [ 66.318224][ T6918] veth1_vlan: entered promiscuous mode [ 66.332110][ T6918] veth0_macvtap: entered promiscuous mode [ 66.339232][ T6918] veth1_macvtap: entered promiscuous mode [ 66.354650][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.355284][ T7030] SELinux: failed to load policy [ 66.365587][ T6918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.406242][ T57] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.415872][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.439685][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.460692][ T57] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.503775][ T7046] loop5: detected capacity change from 0 to 1024 [ 66.524097][ T7048] loop0: detected capacity change from 0 to 1024 [ 66.532118][ T7048] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 66.543132][ T7048] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 66.560473][ T7048] JBD2: no valid journal superblock found [ 66.566248][ T7048] EXT4-fs (loop0): Could not load journal inode [ 66.597100][ T7048] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 66.619235][ T7062] loop5: detected capacity change from 0 to 1024 [ 66.628416][ T7062] EXT4-fs: Ignoring removed orlov option [ 66.634203][ T7062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.652245][ T7062] EXT4-fs mount: 48 callbacks suppressed [ 66.652290][ T7062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.683200][ T7070] netlink: 'syz.0.1501': attribute type 3 has an invalid length. [ 66.683504][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.715693][ T7074] siw: device registration error -23 [ 66.744364][ T7080] loop2: detected capacity change from 0 to 1024 [ 66.794245][ T7088] netlink: 264 bytes leftover after parsing attributes in process `syz.6.1503'. [ 66.803495][ T7088] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1503'. [ 66.836841][ T7093] loop5: detected capacity change from 0 to 764 [ 66.840848][ T7094] loop0: detected capacity change from 0 to 1024 [ 66.850773][ T7093] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 66.854644][ T7094] EXT4-fs: Ignoring removed orlov option [ 66.864614][ T7094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.872393][ T7096] netlink: 'syz.2.1506': attribute type 3 has an invalid length. [ 66.903699][ T7094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.926437][ T7106] loop2: detected capacity change from 0 to 1024 [ 66.946027][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.964287][ T7106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.995099][ T7114] loop6: detected capacity change from 0 to 1024 [ 67.002446][ T7106] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1510: Allocating blocks 449-513 which overlap fs metadata [ 67.024289][ T7116] loop1: detected capacity change from 0 to 1024 [ 67.033569][ T7116] EXT4-fs: Ignoring removed orlov option [ 67.034858][ T7105] EXT4-fs (loop2): pa ffff88810731d1c0: logic 48, phys. 177, len 21 [ 67.039356][ T7116] EXT4-fs: Ignoring removed nomblk_io_submit option [ 67.047340][ T7105] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 67.065341][ T7119] loop0: detected capacity change from 0 to 164 [ 67.080561][ T7119] rock: directory entry would overflow storage [ 67.086745][ T7119] rock: sig=0x66, size=4, remaining=3 [ 67.093334][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.103034][ T7119] rock: directory entry would overflow storage [ 67.109268][ T7119] rock: sig=0x66, size=4, remaining=3 [ 67.126788][ T7116] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.172645][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.306946][ T7160] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1532'. [ 67.387296][ T7171] loop6: detected capacity change from 0 to 1024 [ 67.412072][ T7171] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 67.423120][ T7175] loop0: detected capacity change from 0 to 164 [ 67.423152][ T7171] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 67.435267][ T7171] JBD2: no valid journal superblock found [ 67.444892][ T7171] EXT4-fs (loop6): Could not load journal inode [ 67.498252][ T7171] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 67.617764][ T7201] netlink: 264 bytes leftover after parsing attributes in process `syz.2.1550'. [ 67.626936][ T7201] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1550'. [ 67.658863][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1548'. [ 67.691756][ T7209] loop2: detected capacity change from 0 to 164 [ 67.709545][ T7209] rock: directory entry would overflow storage [ 67.715777][ T7209] rock: sig=0x66, size=4, remaining=3 [ 67.726806][ T7209] rock: directory entry would overflow storage [ 67.733149][ T7209] rock: sig=0x66, size=4, remaining=3 [ 67.745510][ T7215] loop1: detected capacity change from 0 to 1024 [ 67.813898][ T7235] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1567'. [ 67.823011][ T7235] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1567'. [ 67.834989][ T7215] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.865089][ T7215] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.1559: Allocating blocks 449-513 which overlap fs metadata [ 67.887777][ T7214] EXT4-fs (loop1): pa ffff88810731d0e0: logic 48, phys. 177, len 21 [ 67.895979][ T7214] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 67.915642][ T7233] loop6: detected capacity change from 0 to 764 [ 67.929745][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.951033][ T7233] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 67.982829][ T7247] loop5: detected capacity change from 0 to 164 [ 68.000683][ T7247] rock: directory entry would overflow storage [ 68.006912][ T7247] rock: sig=0x66, size=4, remaining=3 [ 68.036606][ T7247] rock: directory entry would overflow storage [ 68.042805][ T7247] rock: sig=0x66, size=4, remaining=3 [ 68.053740][ T7259] loop1: detected capacity change from 0 to 164 [ 68.065746][ T7263] loop0: detected capacity change from 0 to 1024 [ 68.102106][ T7271] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1584'. [ 68.112772][ T7272] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.117826][ T7263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 68.166563][ T7263] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1581: Allocating blocks 449-513 which overlap fs metadata [ 68.207029][ T7261] EXT4-fs (loop0): pa ffff8881071ee5b0: logic 48, phys. 177, len 21 [ 68.215160][ T7261] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 68.244553][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.260289][ T167] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 68.279086][ T7294] loop6: detected capacity change from 0 to 164 [ 68.322524][ T7306] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.355864][ T7314] random: crng reseeded on system resumption [ 68.371753][ T7314] Restarting kernel threads ... [ 68.376806][ T7314] Done restarting kernel threads. [ 68.441598][ T4562] Process accounting resumed [ 68.482463][ T7323] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.489708][ T7323] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.498470][ T167] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 68.565014][ T7346] SELinux: security_context_str_to_sid () failed with errno=-22 [ 68.571115][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.583814][ T7323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.628077][ T31] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.650952][ T31] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.661359][ T31] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.670570][ T31] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.742393][ T29] kauditd_printk_skb: 106 callbacks suppressed [ 68.742408][ T29] audit: type=1400 audit(68.725:2133): avc: denied { connect } for pid=7369 comm="syz.0.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 68.795995][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 68.889803][ T7385] loop5: detected capacity change from 0 to 164 [ 68.946804][ T7397] __nla_validate_parse: 1 callbacks suppressed [ 68.946818][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 68.969593][ T4562] Process accounting resumed [ 68.976960][ T7397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 69.000965][ T29] audit: type=1400 audit(68.985:2134): avc: denied { create } for pid=7407 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.022030][ T29] audit: type=1400 audit(69.005:2135): avc: denied { bind } for pid=7407 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.040640][ T29] audit: type=1400 audit(69.005:2136): avc: denied { listen } for pid=7407 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.059415][ T29] audit: type=1400 audit(69.005:2137): avc: denied { accept } for pid=7407 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.080173][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 69.080681][ T29] audit: type=1400 audit(69.055:2138): avc: denied { write } for pid=7407 comm="syz.2.1642" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 69.227687][ T7429] smc: net device bond0 erased user defined pnetid SYZ0 [ 69.252475][ T7437] random: crng reseeded on system resumption [ 69.265245][ T7437] Restarting kernel threads ... [ 69.270528][ T7437] Done restarting kernel threads. [ 69.292626][ T29] audit: type=1400 audit(69.275:2139): avc: denied { bind } for pid=7440 comm="syz.1.1657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 70.095885][ T7461] loop5: detected capacity change from 0 to 1024 [ 70.105237][ T29] audit: type=1326 audit(70.085:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7451 comm="syz.1.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 70.128066][ T29] audit: type=1326 audit(70.085:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28641ebe9 code=0x7ffc0000 [ 70.151154][ T29] audit: type=1326 audit(70.085:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7455 comm="syz.2.1662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28641ebe9 code=0x7ffc0000 [ 70.154135][ T12] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x2c [ 70.213827][ T7461] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.261738][ T7461] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1661: Allocating blocks 449-513 which overlap fs metadata [ 70.282465][ T7480] random: crng reseeded on system resumption [ 70.291572][ T7481] af_packet: tpacket_rcv: packet too big, clamped from 24 to 4294967272. macoff=96 [ 70.291630][ T7454] EXT4-fs (loop5): pa ffff8881071ee620: logic 48, phys. 177, len 21 [ 70.309007][ T7454] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 70.314802][ T7480] Restarting kernel threads ... [ 70.324740][ T7480] Done restarting kernel threads. [ 70.347881][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.480326][ T167] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.492698][ T167] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.502440][ T167] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 70.511569][ T167] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 71.195817][ T7504] netlink: 'syz.1.1681': attribute type 1 has an invalid length. [ 71.241638][ T7517] loop6: detected capacity change from 0 to 1024 [ 71.253986][ T7521] loop5: detected capacity change from 0 to 512 [ 71.262358][ T7517] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.277161][ T7521] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1697: iget: bad i_size value: 38620345925642 [ 71.309278][ T7530] netlink: 'syz.2.1690': attribute type 2 has an invalid length. [ 71.310415][ T7517] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1685: Allocating blocks 449-513 which overlap fs metadata [ 71.317175][ T7530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1690'. [ 71.341098][ T7521] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1697: couldn't read orphan inode 15 (err -117) [ 71.347998][ T7516] EXT4-fs (loop6): pa ffff88810731d230: logic 48, phys. 177, len 21 [ 71.360996][ T7516] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 71.370636][ T7521] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 71.372591][ T7534] random: crng reseeded on system resumption [ 71.385517][ T7521] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1697: bg 0: block 5: invalid block bitmap [ 71.392259][ T7535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1691'. [ 71.424192][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.442980][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 71.443642][ T7534] Restarting kernel threads ... [ 71.457044][ T7534] Done restarting kernel threads. [ 71.461253][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1692'. [ 71.489494][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.502056][ T7541] program syz.2.1695 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 71.519328][ T7543] bridge0: port 3(batadv1) entered blocking state [ 71.525971][ T7543] bridge0: port 3(batadv1) entered disabled state [ 71.532808][ T7543] batadv1: entered allmulticast mode [ 71.538652][ T7543] batadv1: entered promiscuous mode [ 71.587694][ T7554] capability: warning: `syz.2.1702' uses deprecated v2 capabilities in a way that may be insecure [ 71.647071][ T7567] pim6reg: entered allmulticast mode [ 71.654149][ T7567] pim6reg: left allmulticast mode [ 71.797986][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1720'. [ 71.971612][ T7610] netlink: 268 bytes leftover after parsing attributes in process `syz.5.1729'. [ 72.020401][ T3436] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 72.029809][ T3436] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 72.172494][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1740'. [ 72.183307][ T7634] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 72.337502][ T7660] loop1: detected capacity change from 0 to 1024 [ 72.352264][ T7660] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.373299][ T7660] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 72.400580][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.475124][ T7683] loop5: detected capacity change from 0 to 128 [ 72.482081][ T7683] EXT4-fs: Ignoring removed nobh option [ 72.489046][ T7683] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 72.518210][ T6804] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 72.549145][ T7694] netlink: 'syz.6.1768': attribute type 1 has an invalid length. [ 72.557034][ T7694] netlink: 199820 bytes leftover after parsing attributes in process `syz.6.1768'. [ 72.826055][ T7734] lo speed is unknown, defaulting to 1000 [ 72.914323][ T7748] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 72.968807][ T7759] loop0: detected capacity change from 0 to 764 [ 73.094133][ T7767] loop6: detected capacity change from 0 to 8192 [ 73.119338][ T7778] serio: Serial port ptm0 [ 73.132927][ T7780] capability: warning: `syz.5.1806' uses 32-bit capabilities (legacy support in use) [ 73.317205][ T7786] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 73.498940][ T7800] loop2: detected capacity change from 0 to 1024 [ 73.506582][ T7800] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 73.517480][ T7800] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 73.532388][ T7800] JBD2: no valid journal superblock found [ 73.538137][ T7800] EXT4-fs (loop2): Could not load journal inode [ 73.548725][ T7800] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 73.614485][ T7815] loop2: detected capacity change from 0 to 512 [ 73.621201][ T7815] EXT4-fs: Ignoring removed mblk_io_submit option [ 73.676786][ T7815] EXT4-fs (loop2): failed to initialize system zone (-117) [ 73.840349][ T7815] EXT4-fs (loop2): mount failed [ 73.874654][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 73.874812][ T29] audit: type=1400 audit(73.852:2339): avc: denied { unmount } for pid=6918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 73.942822][ T7829] netlink: 'syz.6.1828': attribute type 2 has an invalid length. [ 73.950697][ T7829] netlink: 'syz.6.1828': attribute type 1 has an invalid length. [ 73.992628][ T7834] loop6: detected capacity change from 0 to 512 [ 73.999819][ T29] audit: type=1400 audit(73.972:2340): avc: denied { read } for pid=7830 comm="syz.1.1832" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.064256][ T29] audit: type=1400 audit(73.972:2341): avc: denied { open } for pid=7830 comm="syz.1.1832" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.070022][ T7834] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.088252][ T29] audit: type=1400 audit(73.972:2342): avc: denied { ioctl } for pid=7830 comm="syz.1.1832" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 74.139479][ T29] audit: type=1400 audit(74.112:2343): avc: denied { read } for pid=7840 comm="syz.5.1836" path="socket:[19858]" dev="sockfs" ino=19858 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 74.192979][ T7848] __nla_validate_parse: 4 callbacks suppressed [ 74.192995][ T7848] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1838'. [ 74.208410][ T7848] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 74.239713][ T7849] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1836'. [ 74.260746][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.306653][ T29] audit: type=1326 audit(74.282:2344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 74.311502][ T7861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1843'. [ 74.329636][ T29] audit: type=1326 audit(74.282:2345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 74.361076][ T29] audit: type=1326 audit(74.282:2346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 74.383888][ T29] audit: type=1326 audit(74.282:2347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 74.406720][ T29] audit: type=1326 audit(74.282:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7859 comm="syz.1.1844" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 74.447948][ T7871] netlink: 'syz.2.1848': attribute type 5 has an invalid length. [ 74.453523][ T7875] loop5: detected capacity change from 0 to 1024 [ 74.463412][ T7875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 74.502400][ T7875] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.585588][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.624649][ T7892] 9pnet_fd: Insufficient options for proto=fd [ 74.676540][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1857'. [ 74.707837][ T7897] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 74.771537][ T7907] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 74.831213][ T4562] hid_parser_main: 22 callbacks suppressed [ 74.831340][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.844686][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.852112][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.877638][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.885138][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.892540][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.899913][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.907364][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.914816][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.922258][ T4562] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 74.949320][ T4562] hid-generic 0000:0000:0000.0003: hidraw0: HID v8.00 Device [syz1] on syz0 [ 75.029620][ T7941] loop6: detected capacity change from 0 to 128 [ 75.073077][ T7946] loop5: detected capacity change from 0 to 512 [ 75.085606][ T7951] sch_fq: defrate 4294967295 ignored. [ 75.091491][ T7946] ext4: Unknown parameter 'appraise' [ 75.106127][ T7943] SELinux: failed to load policy [ 75.212082][ T7976] loop1: detected capacity change from 0 to 512 [ 75.226607][ T7976] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.239625][ T7976] ext4 filesystem being mounted at /369/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.293890][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.384281][ T8009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1913'. [ 75.482085][ T8025] loop5: detected capacity change from 0 to 1024 [ 75.551508][ T8025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.571848][ T8025] ext4 filesystem being mounted at /100/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.602048][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.826857][ T8073] loop2: detected capacity change from 0 to 128 [ 76.035001][ T8118] SELinux: Context system_u:object_r:iptables_unit_file_t:s0 is not valid (left unmapped). [ 76.146663][ T8145] lo speed is unknown, defaulting to 1000 [ 76.415977][ T8188] veth3: entered promiscuous mode [ 76.549857][ T4543] hid-generic 0000:3000000:0000.0004: hidraw0: HID v0.00 Device [sy] on syz0 [ 76.599679][ T8208] SELinux: failed to load policy [ 76.635617][ T8217] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 76.635617][ T8217] program syz.1.2005 not setting count and/or reply_len properly [ 76.679448][ T8222] vlan2: entered allmulticast mode [ 76.757486][ T8232] loop6: detected capacity change from 0 to 1024 [ 76.801357][ T8232] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.822701][ T8232] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.2013: missing EA_INODE flag [ 76.837438][ T8247] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2017'. [ 76.876226][ T8232] EXT4-fs (loop6): Remounting filesystem read-only [ 76.918023][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.932985][ T8259] loop1: detected capacity change from 0 to 512 [ 76.940248][ T8259] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 76.956854][ T8259] EXT4-fs (loop1): 1 truncate cleaned up [ 76.963204][ T8259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.013853][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.025962][ T8268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 77.041900][ T8264] SELinux: failed to load policy [ 77.169748][ T8291] sd 0:0:1:0: device reset [ 77.208031][ T8295] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2038'. [ 77.257375][ T8299] loop1: detected capacity change from 0 to 512 [ 77.272136][ T8299] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 77.291641][ T8299] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 77.301654][ T8299] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 77.310347][ T8299] System zones: 0-2, 18-18, 34-34 [ 77.315890][ T8299] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2039: iget: bad i_size value: 360287970189639680 [ 77.347008][ T8299] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2039: couldn't read orphan inode 15 (err -117) [ 77.397393][ T8299] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.459790][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.654918][ T8321] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2045'. [ 77.850163][ T8347] veth3: entered promiscuous mode [ 77.921401][ T8358] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 77.921401][ T8358] program syz.5.2066 not setting count and/or reply_len properly [ 78.105606][ T8382] veth3: entered promiscuous mode [ 78.131801][ T8384] loop2: detected capacity change from 0 to 512 [ 78.139618][ T8384] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 78.148116][ T8384] System zones: 1-12 [ 78.152449][ T8384] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2078: corrupted in-inode xattr: e_value size too large [ 78.169393][ T8384] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2078: couldn't read orphan inode 15 (err -117) [ 78.182468][ T8384] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.209983][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.235389][ T8387] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 78.235389][ T8387] program syz.0.2079 not setting count and/or reply_len properly [ 78.314170][ T8404] bridge_slave_0: left allmulticast mode [ 78.319850][ T8404] bridge_slave_0: left promiscuous mode [ 78.325532][ T8404] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.335307][ T8404] bridge_slave_1: left allmulticast mode [ 78.341117][ T8404] bridge_slave_1: left promiscuous mode [ 78.346851][ T8404] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.357506][ T8404] bond0: (slave bond_slave_0): Releasing backup interface [ 78.368644][ T8404] bond0: (slave bond_slave_1): Releasing backup interface [ 78.381081][ T8404] team0: Port device team_slave_0 removed [ 78.389761][ T8404] team0: Port device team_slave_1 removed [ 78.397223][ T8404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.404690][ T8404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.417865][ T8404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.425334][ T8404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.615392][ T8449] loop2: detected capacity change from 0 to 512 [ 78.628590][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2110'. [ 78.642419][ T8449] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.681434][ T8449] EXT4-fs (loop2): 1 truncate cleaned up [ 78.701019][ T8449] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.737521][ T8467] loop1: detected capacity change from 0 to 512 [ 78.744738][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.766480][ T8465] vlan2: entered allmulticast mode [ 78.771791][ T8465] bridge_slave_0: entered allmulticast mode [ 78.785503][ T8467] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.2125: iget: bad i_size value: 38620345925642 [ 78.822098][ T8467] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.2125: couldn't read orphan inode 15 (err -117) [ 78.836313][ T8467] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.864049][ T8467] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.2125: bg 0: block 5: invalid block bitmap [ 78.884386][ T29] kauditd_printk_skb: 193 callbacks suppressed [ 78.884400][ T29] audit: type=1400 audit(2000000003.929:2542): avc: denied { map } for pid=8478 comm="syz.6.2120" path="socket:[21885]" dev="sockfs" ino=21885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.914036][ T29] audit: type=1400 audit(2000000003.929:2543): avc: denied { read } for pid=8478 comm="syz.6.2120" path="socket:[21885]" dev="sockfs" ino=21885 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.960002][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.974768][ T8485] loop5: detected capacity change from 0 to 1024 [ 79.009342][ T8494] program syz.1.2128 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.022047][ T8485] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.038087][ T29] audit: type=1326 audit(2000000004.079:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8495 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d6c4ebe9 code=0x7ffc0000 [ 79.062747][ T29] audit: type=1326 audit(2000000004.109:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8495 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff3d6c4ebe9 code=0x7ffc0000 [ 79.086043][ T29] audit: type=1326 audit(2000000004.109:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8495 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d6c4ebe9 code=0x7ffc0000 [ 79.109518][ T29] audit: type=1326 audit(2000000004.109:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8495 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7ff3d6c4ebe9 code=0x7ffc0000 [ 79.132942][ T29] audit: type=1326 audit(2000000004.109:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8495 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d6c4ebe9 code=0x7ffc0000 [ 79.156848][ T29] audit: type=1326 audit(2000000004.109:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8495 comm="syz.0.2136" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3d6c4ebe9 code=0x7ffc0000 [ 79.182659][ T8485] netlink: 'syz.5.2123': attribute type 10 has an invalid length. [ 79.208204][ T8485] ipvlan0: entered allmulticast mode [ 79.213635][ T8485] veth0_vlan: entered allmulticast mode [ 79.231830][ T8485] team0: Device ipvlan0 failed to register rx_handler [ 79.258235][ T4555] hid-generic 0000:3000000:0000.0005: hidraw0: HID v0.00 Device [sy] on syz0 [ 79.309487][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.364200][ T8523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2141'. [ 79.413195][ T8531] loop5: detected capacity change from 0 to 128 [ 79.448846][ T8538] vlan2: entered allmulticast mode [ 79.472844][ T8540] loop5: detected capacity change from 0 to 512 [ 79.501292][ T8540] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.514226][ T8540] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.563218][ T29] audit: type=1400 audit(2000000004.609:2550): avc: denied { append } for pid=8539 comm="syz.5.2148" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 79.638201][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.761955][ T8560] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2155'. [ 79.762159][ T8558] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2154'. [ 79.793631][ T8560] syz.5.2155 (8560) used greatest stack depth: 9752 bytes left [ 79.815233][ T8563] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2167'. [ 79.830429][ T29] audit: type=1107 audit(2000000004.869:2551): pid=8562 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 79.855022][ T8570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2159'. [ 79.968917][ T8585] bond_slave_0: entered promiscuous mode [ 79.974694][ T8585] bond_slave_1: entered promiscuous mode [ 79.981595][ T8585] bond_slave_0: left promiscuous mode [ 79.987024][ T8585] bond_slave_1: left promiscuous mode [ 80.008318][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2179'. [ 80.076888][ T8595] loop5: detected capacity change from 0 to 1024 [ 80.105213][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 80.115253][ T8595] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.149635][ T8595] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 80.209903][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.371363][ T8641] loop5: detected capacity change from 0 to 512 [ 80.385635][ T8641] EXT4-fs: Ignoring removed mblk_io_submit option [ 80.401043][ T8641] EXT4-fs (loop5): failed to initialize system zone (-117) [ 80.401819][ T8644] loop6: detected capacity change from 0 to 128 [ 80.408275][ T8641] EXT4-fs (loop5): mount failed [ 80.432923][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 80.450892][ T8646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 80.807019][ T8667] netlink: 'syz.5.2205': attribute type 2 has an invalid length. [ 80.815163][ T8667] netlink: 'syz.5.2205': attribute type 1 has an invalid length. [ 80.930518][ T8672] loop5: detected capacity change from 0 to 2048 [ 80.980965][ T8672] loop5: p1 < > p4 [ 80.985813][ T8672] loop5: p4 size 8388608 extends beyond EOD, truncated [ 81.054643][ T8685] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2208'. [ 81.099690][ T8693] vlan0: entered allmulticast mode [ 81.157702][ T8700] vhci_hcd: default hub control req: 0310 v0009 i0003 l0 [ 81.328774][ T8722] loop1: detected capacity change from 0 to 512 [ 81.336982][ T8722] ext4: Unknown parameter 'appraise' [ 81.345229][ T8724] sch_fq: defrate 4294967295 ignored. [ 81.483921][ T8740] loop5: detected capacity change from 0 to 8192 [ 81.571563][ T4562] hid_parser_main: 24 callbacks suppressed [ 81.571580][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.584891][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.592318][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.600684][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.608097][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.615603][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.623025][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.630460][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.637850][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.645368][ T4562] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 81.657458][ T4562] hid-generic 0000:0000:0000.0006: hidraw0: HID v8.00 Device [syz1] on syz0 [ 81.733294][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.742346][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.751993][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 81.761139][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 82.293191][ T8784] loop6: detected capacity change from 0 to 512 [ 82.312805][ T8784] EXT4-fs (loop6): orphan cleanup on readonly fs [ 82.320945][ T8784] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm +}[@: bg 0: block 248: padding at end of block bitmap is not set [ 82.341244][ T8784] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm +}[@: Failed to acquire dquot type 1 [ 82.385381][ T8784] EXT4-fs (loop6): 1 truncate cleaned up [ 82.400917][ T8784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 82.431517][ T8784] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 82.441239][ T8784] EXT4-fs warning (device loop6): read_mmp_block:115: Error -117 while reading MMP block 0 [ 82.468338][ T8784] +}[@ (8784) used greatest stack depth: 9280 bytes left [ 82.476699][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.562424][ T8808] loop6: detected capacity change from 0 to 128 [ 82.581870][ T8808] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 82.605165][ T8808] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.655813][ T6918] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.800044][ T8844] vlan2: entered allmulticast mode [ 82.967528][ T8864] lo speed is unknown, defaulting to 1000 [ 83.034012][ T8875] bridge_slave_0: left promiscuous mode [ 83.039698][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.049649][ T8875] bridge_slave_1: left allmulticast mode [ 83.055476][ T8875] bridge_slave_1: left promiscuous mode [ 83.061226][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.072228][ T8875] bond0: (slave bond_slave_0): Releasing backup interface [ 83.081850][ T8875] bond0: (slave bond_slave_1): Releasing backup interface [ 83.092886][ T8875] team0: Port device team_slave_0 removed [ 83.101303][ T8875] team0: Port device team_slave_1 removed [ 83.107965][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.115528][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.123939][ T8875] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.131419][ T8875] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.150000][ T4562] lo speed is unknown, defaulting to 1000 [ 83.307956][ T8893] netlink: 'syz.6.2305': attribute type 10 has an invalid length. [ 83.321800][ T8893] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 83.416614][ T8902] loop6: detected capacity change from 0 to 1024 [ 83.424488][ T8902] EXT4-fs: Ignoring removed nobh option [ 83.430748][ T8902] EXT4-fs: Ignoring removed bh option [ 83.450407][ T8902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.491817][ T8902] loop6: detected capacity change from 1024 to 64 [ 83.508510][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.529841][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.545433][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.559049][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.572767][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.586340][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.599886][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.613498][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.627158][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.640653][ T6918] EXT4-fs warning (device loop6): ext4_empty_dir:3080: inode #11: lblock 0: comm syz-executor: error -12 reading directory block [ 83.702268][ T6918] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.712450][ T8905] bio_check_eod: 325 callbacks suppressed [ 83.712466][ T8905] kmmpd-loop6: attempt to access beyond end of device [ 83.712466][ T8905] loop6: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 83.731739][ T8905] Buffer I/O error on dev loop6, logical block 64, lost sync page write [ 83.895271][ T29] kauditd_printk_skb: 123 callbacks suppressed [ 83.895287][ T29] audit: type=1400 audit(2000000002.349:2673): avc: denied { create } for pid=8929 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 83.936708][ T29] audit: type=1400 audit(2000000002.379:2674): avc: denied { bind } for pid=8929 comm="syz.0.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.000402][ T167] batadv1: left allmulticast mode [ 84.005467][ T167] batadv1: left promiscuous mode [ 84.010596][ T167] bridge0: port 3(batadv1) entered disabled state [ 84.020385][ T29] audit: type=1400 audit(2000000002.469:2675): avc: denied { create } for pid=8945 comm="syz.0.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.040015][ T29] audit: type=1400 audit(2000000002.479:2676): avc: denied { bind } for pid=8945 comm="syz.0.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.060378][ T29] audit: type=1400 audit(2000000002.479:2677): avc: denied { write } for pid=8945 comm="syz.0.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 84.080497][ T167] bridge_slave_1: left allmulticast mode [ 84.086140][ T167] bridge_slave_1: left promiscuous mode [ 84.091953][ T167] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.104329][ T167] bridge_slave_0: left promiscuous mode [ 84.110014][ T167] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.110999][ T8951] loop2: detected capacity change from 0 to 512 [ 84.127040][ T8951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 84.135545][ T8951] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 84.150218][ T8951] EXT4-fs (loop2): 1 truncate cleaned up [ 84.159123][ T167] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 84.167690][ T8951] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.187060][ T29] audit: type=1400 audit(2000000002.639:2678): avc: denied { read write } for pid=8950 comm="syz.2.2328" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.209905][ T29] audit: type=1400 audit(2000000002.639:2679): avc: denied { open } for pid=8950 comm="syz.2.2328" path="/449/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.243193][ T29] audit: type=1400 audit(2000000002.699:2680): avc: denied { ioctl } for pid=8950 comm="syz.2.2328" path="/449/file1/file1" dev="loop2" ino=15 ioctlcmd=0x5829 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 84.284416][ T167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.293432][ T29] audit: type=1400 audit(2000000002.749:2681): avc: denied { ioctl } for pid=8963 comm="syz.1.2331" path="socket:[23030]" dev="sockfs" ino=23030 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.320146][ T167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.329778][ T167] bond0 (unregistering): Released all slaves [ 84.334163][ T8966] serio: Serial port ptm0 [ 84.341629][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.352337][ T8921] lo speed is unknown, defaulting to 1000 [ 84.372634][ T29] audit: type=1400 audit(2000000002.829:2682): avc: denied { read } for pid=8968 comm="syz.2.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 84.372844][ T8969] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2333'. [ 84.418920][ T167] hsr_slave_0: left promiscuous mode [ 84.425215][ T167] hsr_slave_1: left promiscuous mode [ 84.431869][ T167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.439492][ T167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.486259][ T167] team0 (unregistering): Port device team_slave_1 removed [ 84.497308][ T167] team0 (unregistering): Port device team_slave_0 removed [ 84.589149][ T8921] chnl_net:caif_netlink_parms(): no params data found [ 84.639961][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.647224][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.655680][ T8921] bridge_slave_0: entered allmulticast mode [ 84.662461][ T8921] bridge_slave_0: entered promiscuous mode [ 84.669299][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.676402][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.685275][ T8921] bridge_slave_1: entered allmulticast mode [ 84.692230][ T8921] bridge_slave_1: entered promiscuous mode [ 84.725973][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.736636][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.758241][ T8921] team0: Port device team_slave_0 added [ 84.764597][ T8921] team0: Port device team_slave_1 added [ 84.787157][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.794227][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.820168][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.831493][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.838442][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.864476][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.892929][ T8921] hsr_slave_0: entered promiscuous mode [ 84.899506][ T8921] hsr_slave_1: entered promiscuous mode [ 84.974082][ T9017] SELinux: failed to load policy [ 85.119748][ T8921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 85.128960][ T8921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 85.142073][ T8921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 85.151713][ T8921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.192138][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.203115][ T8921] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.215186][ T167] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.222279][ T167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.238440][ T167] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.245598][ T167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.306943][ T8921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.418181][ T8921] veth0_vlan: entered promiscuous mode [ 85.434303][ T8921] veth1_vlan: entered promiscuous mode [ 85.464054][ T8921] veth0_macvtap: entered promiscuous mode [ 85.478282][ T8921] veth1_macvtap: entered promiscuous mode [ 85.491700][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.502949][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.517763][ T9061] SELinux: failed to load policy [ 85.521314][ T31] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.533281][ T31] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.558283][ T31] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.592483][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.651864][ T9076] bridge_slave_0: left allmulticast mode [ 85.657538][ T9076] bridge_slave_0: left promiscuous mode [ 85.663432][ T9076] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.678666][ T9076] bridge_slave_1: left allmulticast mode [ 85.684428][ T9076] bridge_slave_1: left promiscuous mode [ 85.690158][ T9076] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.705658][ T9076] bond0: (slave bond_slave_0): Releasing backup interface [ 85.714851][ T9076] bond0: (slave bond_slave_1): Releasing backup interface [ 85.725654][ T9076] team0: Port device team_slave_0 removed [ 85.733629][ T9076] team0: Port device team_slave_1 removed [ 85.739956][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.747528][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.757883][ T9076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.765341][ T9076] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.977588][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 85.987823][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 85.988158][ T9121] loop6: detected capacity change from 0 to 128 [ 85.997614][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 86.003678][ T9121] EXT4-fs: Ignoring removed nobh option [ 86.013162][ T9119] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2385'. [ 86.019758][ T9121] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.041920][ T9121] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.085895][ T8921] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.175683][ T9150] loop6: detected capacity change from 0 to 1024 [ 86.207451][ T9150] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.219834][ T9150] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.245267][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.267362][ T9165] loop6: detected capacity change from 0 to 512 [ 86.282126][ T9165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.294732][ T9165] ext4 filesystem being mounted at /11/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.308246][ T9165] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2402: corrupted inode contents [ 86.321604][ T9165] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.2402: mark_inode_dirty error [ 86.333423][ T9165] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.2402: corrupted inode contents [ 86.346245][ T9165] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.2402: mark_inode_dirty error [ 86.372703][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.460244][ T9187] lo speed is unknown, defaulting to 1000 [ 86.498927][ T9189] bridge_slave_0: left promiscuous mode [ 86.504645][ T9189] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.540462][ T9189] bridge_slave_1: left allmulticast mode [ 86.546139][ T9189] bridge_slave_1: left promiscuous mode [ 86.551803][ T9189] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.570647][ T9189] bond0: (slave bond_slave_0): Releasing backup interface [ 86.578708][ T9189] bond0: (slave bond_slave_1): Releasing backup interface [ 86.591900][ T9197] loop2: detected capacity change from 0 to 1024 [ 86.601042][ T9189] team0: Port device team_slave_0 removed [ 86.607492][ T9189] team0: Port device team_slave_1 removed [ 86.683993][ T9197] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.687679][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2415'. [ 86.697448][ T9197] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.705136][ T9198] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2415'. [ 86.726974][ T9198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2415'. [ 86.737100][ T9198] netlink: 196 bytes leftover after parsing attributes in process `syz.5.2415'. [ 86.766062][ T9208] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2419'. [ 86.766569][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.775056][ T9208] netem: unknown loss type 13 [ 86.924137][ T9237] rdma_op ffff888117f31980 conn xmit_rdma 0000000000000000 [ 86.933209][ T9239] bridge_slave_0: left promiscuous mode [ 86.938999][ T9239] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.948282][ T9239] bridge_slave_1: left allmulticast mode [ 86.954085][ T9239] bridge_slave_1: left promiscuous mode [ 86.959802][ T9239] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.962498][ T9241] loop6: detected capacity change from 0 to 2048 [ 86.974770][ T9239] bond0: (slave bond_slave_0): Releasing backup interface [ 86.984891][ T9239] bond0: (slave bond_slave_1): Releasing backup interface [ 86.992598][ T9241] loop6: p1 < > p4 [ 86.997000][ T9241] loop6: p4 size 8388608 extends beyond EOD, truncated [ 87.014717][ T9239] team0: Port device team_slave_0 removed [ 87.021860][ T9239] team0: Port device team_slave_1 removed [ 87.051370][ T9250] loop6: detected capacity change from 0 to 1024 [ 87.202984][ T9250] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 87.742384][ T9284] loop6: detected capacity change from 0 to 512 [ 87.749186][ T9284] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 87.760758][ T9284] EXT4-fs (loop6): 1 truncate cleaned up [ 87.876875][ T9293] loop5: detected capacity change from 0 to 512 [ 87.902274][ T9293] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.924793][ T9293] EXT4-fs error (device loop5): ext4_lookup:1787: inode #12: comm syz.5.2455: iget: bad i_size value: 2533274857506816 [ 87.943590][ T9299] option changes via remount are deprecated (pid=9298 comm=syz.2.2457) [ 88.244413][ T9351] loop6: detected capacity change from 0 to 512 [ 88.254220][ T9351] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 88.293357][ T9351] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.397203][ T9365] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 88.417655][ T9374] netlink: 'syz.0.2492': attribute type 13 has an invalid length. [ 88.426613][ T9374] netlink: 'syz.0.2492': attribute type 13 has an invalid length. [ 88.443868][ T9377] netlink: 'syz.6.2493': attribute type 1 has an invalid length. [ 88.573551][ T9401] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 88.698276][ T9429] option changes via remount are deprecated (pid=9425 comm=syz.0.2515) [ 88.905577][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 88.905592][ T29] audit: type=1400 audit(2000000007.359:2890): avc: denied { read write } for pid=3308 comm="syz-executor" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.936123][ T29] audit: type=1400 audit(2000000007.359:2891): avc: denied { open } for pid=3308 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.964022][ T29] audit: type=1400 audit(2000000007.359:2892): avc: denied { ioctl } for pid=3308 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 88.989763][ T29] audit: type=1400 audit(2000000007.369:2893): avc: denied { map_create } for pid=9452 comm="syz.2.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.008976][ T29] audit: type=1400 audit(2000000007.369:2894): avc: denied { map_read map_write } for pid=9452 comm="syz.2.2526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.061688][ T9450] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 89.068793][ T29] audit: type=1400 audit(2000000007.509:2895): avc: denied { create } for pid=9454 comm="syz.1.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.097426][ T29] audit: type=1400 audit(2000000007.509:2896): avc: denied { connect } for pid=9454 comm="syz.1.2527" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 89.118886][ T29] audit: type=1400 audit(2000000007.579:2897): avc: denied { create } for pid=9456 comm="syz.5.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.138622][ T29] audit: type=1400 audit(2000000007.579:2898): avc: denied { connect } for pid=9456 comm="syz.5.2528" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 89.176319][ T29] audit: type=1326 audit(2000000007.619:2899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9458 comm="syz.2.2530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28641ebe9 code=0x7ffc0000 [ 89.253415][ T9469] loop5: detected capacity change from 0 to 164 [ 89.274299][ T9469] syz.5.2534: attempt to access beyond end of device [ 89.274299][ T9469] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 89.294652][ T9469] syz.5.2534: attempt to access beyond end of device [ 89.294652][ T9469] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 89.456308][ T9507] netlink: 'syz.5.2553': attribute type 1 has an invalid length. [ 89.464146][ T9507] __nla_validate_parse: 5 callbacks suppressed [ 89.464190][ T9507] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2553'. [ 89.591178][ T9503] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 89.704276][ T9534] loop2: detected capacity change from 0 to 1024 [ 89.845143][ T9560] hub 9-0:1.0: USB hub found [ 89.849848][ T9560] hub 9-0:1.0: 8 ports detected [ 89.887297][ T9562] loop5: detected capacity change from 0 to 1024 [ 89.898409][ T9558] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 89.926051][ T9562] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 89.981858][ T9565] syzkaller1: entered promiscuous mode [ 89.987399][ T9565] syzkaller1: entered allmulticast mode [ 90.009334][ T9534] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt. [ 90.139770][ T9591] netlink: 'syz.5.2584': attribute type 13 has an invalid length. [ 90.147648][ T9591] netlink: 'syz.5.2584': attribute type 17 has an invalid length. [ 90.207155][ T9591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.257197][ T9611] netem: incorrect gi model size [ 90.262236][ T9611] netem: change failed [ 90.575914][ T9627] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2605'. [ 90.597495][ T9629] netlink: 268 bytes leftover after parsing attributes in process `+}[@'. [ 90.634656][ T9633] SELinux: failed to load policy [ 90.765444][ T9651] SELinux: failed to load policy [ 90.805490][ T9654] sd 0:0:1:0: device reset [ 90.929674][ T9656] SELinux: failed to load policy [ 90.959262][ T9660] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2621'. [ 90.968704][ T9660] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 90.996580][ T9666] netlink: 'syz.5.2624': attribute type 1 has an invalid length. [ 91.037374][ T9674] netlink: 'syz.0.2628': attribute type 3 has an invalid length. [ 91.137475][ T9692] loop2: detected capacity change from 0 to 128 [ 91.148058][ T9692] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 91.155966][ T9692] FAT-fs (loop2): Filesystem has been set read-only [ 91.163403][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.163403][ T9692] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 91.177262][ T9692] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 91.185144][ T9692] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 91.193495][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.193495][ T9692] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.206947][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.206947][ T9692] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.220433][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.220433][ T9692] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.233732][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.233732][ T9692] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.247284][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.247284][ T9692] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.260655][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.260655][ T9692] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.271079][ T9696] vhci_hcd: invalid port number 96 [ 91.274073][ T9692] syz.2.2637: attempt to access beyond end of device [ 91.274073][ T9692] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 91.279008][ T9696] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 91.594750][ T9706] netlink: 'syz.6.2641': attribute type 3 has an invalid length. [ 91.641721][ T9712] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2644'. [ 91.763532][ T9728] syzkaller1: entered promiscuous mode [ 91.769062][ T9728] syzkaller1: entered allmulticast mode [ 92.043057][ T9759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2668'. [ 92.070083][ T9759] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 92.083602][ T9751] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 92.098395][ T9767] loop2: detected capacity change from 0 to 512 [ 92.109332][ T9751] SELinux: failed to load policy [ 92.148752][ T9767] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.195075][ T9767] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.2671: corrupted inode contents [ 92.212450][ T9767] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #19: comm syz.2.2671: mark_inode_dirty error [ 92.224893][ T9789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.249808][ T9767] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #19: comm syz.2.2671: corrupted inode contents [ 92.265070][ T9767] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #19: comm syz.2.2671: mark_inode_dirty error [ 92.277416][ T9767] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #19: comm syz.2.2671: mark inode dirty (error -117) [ 92.290838][ T9767] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 92.331424][ T9800] netlink: 'syz.5.2685': attribute type 3 has an invalid length. [ 92.419173][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2684'. [ 92.454974][ T9816] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 92.506645][ T9833] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 92.552544][ T9842] loop0: detected capacity change from 0 to 1024 [ 92.559395][ T9842] EXT4-fs: Ignoring removed nobh option [ 92.565905][ T9842] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 92.589103][ T9842] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #11: comm syz.0.2705: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 92.609943][ T9842] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2705: couldn't read orphan inode 11 (err -117) [ 92.624382][ T9842] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.2705: Invalid block bitmap block 0 in block_group 0 [ 92.638380][ T9842] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2705: Failed to acquire dquot type 0 [ 92.661195][ T167] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 92.702675][ T9856] SELinux: failed to load policy [ 93.074213][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 93.083344][ T9877] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2720'. [ 93.092395][ T9877] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2720'. [ 93.221486][ T9881] sch_tbf: burst 6 is lower than device ip6gre0 mtu (1448) ! [ 93.303567][ T9891] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 93.608693][ T9899] netlink: 'syz.2.2731': attribute type 2 has an invalid length. [ 93.616514][ T9899] netlink: 'syz.2.2731': attribute type 1 has an invalid length. [ 93.624283][ T9899] netlink: 'syz.2.2731': attribute type 8 has an invalid length. [ 93.644939][ T9901] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9901 comm=syz.0.2732 [ 93.787661][ T9919] loop0: detected capacity change from 0 to 512 [ 93.807062][ T9919] ext4 filesystem being mounted at /580/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.875974][ T9928] netlink: 'syz.2.2743': attribute type 13 has an invalid length. [ 93.883970][ T9928] netlink: 'syz.2.2743': attribute type 17 has an invalid length. [ 93.894273][ T9930] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #19: comm syz.0.2740: corrupted inode contents [ 93.922779][ T9930] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #19: comm syz.0.2740: mark_inode_dirty error [ 93.943867][ T9930] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #19: comm syz.0.2740: corrupted inode contents [ 93.959260][ T9930] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2991: inode #19: comm syz.0.2740: mark_inode_dirty error [ 93.973587][ T9930] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2994: inode #19: comm syz.0.2740: mark inode dirty (error -117) [ 93.992312][ T9928] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 93.996093][ T9930] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -117) [ 94.072366][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 94.072379][ T29] audit: type=1400 audit(2000000012.529:3204): avc: denied { watch watch_reads } for pid=9934 comm="syz.6.2747" path="/116/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.119697][ T29] audit: type=1400 audit(2000000012.569:3205): avc: denied { execute_no_trans } for pid=9934 comm="syz.6.2747" path="/116/file0" dev="tmpfs" ino=621 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.166863][ T29] audit: type=1400 audit(2000000012.609:3206): avc: denied { create } for pid=9939 comm="syz.6.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.186436][ T29] audit: type=1400 audit(2000000012.609:3207): avc: denied { bind } for pid=9939 comm="syz.6.2749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 94.205686][ T29] audit: type=1400 audit(2000000012.619:3208): avc: denied { write } for pid=9937 comm="syz.2.2748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 94.270325][ T29] audit: type=1400 audit(2000000012.719:3209): avc: denied { read write } for pid=9947 comm="syz.6.2753" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.293972][ T29] audit: type=1400 audit(2000000012.719:3210): avc: denied { open } for pid=9947 comm="syz.6.2753" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 94.341354][ T29] audit: type=1400 audit(2000000012.779:3211): avc: denied { getopt } for pid=9945 comm="syz.2.2752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 94.450171][ T29] audit: type=1400 audit(2000000012.889:3212): avc: denied { validate_trans } for pid=9966 comm="syz.0.2760" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 94.563221][ T29] audit: type=1400 audit(2000000012.999:3213): avc: denied { create } for pid=9978 comm="syz.6.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 94.597190][ C1] hrtimer: interrupt took 37933 ns [ 94.959332][T10004] __nla_validate_parse: 2 callbacks suppressed [ 94.959349][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2775'. [ 95.122791][T10010] loop6: detected capacity change from 0 to 512 [ 95.170433][T10010] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.274144][T10010] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.2777: corrupted inode contents [ 95.320549][T10010] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #19: comm syz.6.2777: mark_inode_dirty error [ 95.346886][T10010] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #19: comm syz.6.2777: corrupted inode contents [ 95.403527][T10010] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.2777: mark_inode_dirty error [ 95.428680][T10010] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.2777: mark inode dirty (error -117) [ 95.452984][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 95.463539][T10037] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2791'. [ 95.472571][T10010] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 95.642368][T10053] netlink: 'syz.6.2793': attribute type 13 has an invalid length. [ 95.650190][T10053] netlink: 'syz.6.2793': attribute type 17 has an invalid length. [ 95.733363][T10053] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 95.777755][T10062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10062 comm=syz.5.2803 [ 95.790341][T10062] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10062 comm=syz.5.2803 [ 95.861433][T10068] loop0: detected capacity change from 0 to 512 [ 95.874375][T10068] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 95.931531][T10068] EXT4-fs (loop0): 1 truncate cleaned up [ 95.942789][T10068] pimreg: entered allmulticast mode [ 95.948712][T10068] pimreg: left allmulticast mode [ 95.965444][T10076] smc: net device bond0 applied user defined pnetid SYZ0 [ 95.976619][T10076] smc: net device bond0 erased user defined pnetid SYZ0 [ 95.993664][T10078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.496120][T10109] vcan0: entered allmulticast mode [ 96.501555][T10109] vcan0: left allmulticast mode [ 96.846987][T10128] loop6: detected capacity change from 0 to 512 [ 96.854051][T10128] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 96.867364][T10128] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2832: invalid indirect mapped block 4294967295 (level 0) [ 96.882616][T10128] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.2832: invalid indirect mapped block 4294967295 (level 1) [ 96.899852][T10128] EXT4-fs (loop6): 1 orphan inode deleted [ 96.905682][T10128] EXT4-fs (loop6): 1 truncate cleaned up [ 96.912161][T10128] EXT4-fs mount: 20 callbacks suppressed [ 96.912175][T10128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.954582][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2836'. [ 96.963684][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2836'. [ 96.975250][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.003395][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2837'. [ 97.012430][T10142] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2837'. [ 97.027526][T10148] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2841'. [ 97.162668][T10175] lo speed is unknown, defaulting to 1000 [ 97.303688][T10194] loop0: detected capacity change from 0 to 512 [ 97.319405][T10194] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 97.331757][T10194] EXT4-fs (loop0): 1 truncate cleaned up [ 97.338441][T10194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.431875][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.463948][T10203] sch_tbf: burst 3298 is lower than device lo mtu (11337746) ! [ 97.485718][T10205] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2865'. [ 97.556072][T10213] netlink: 'syz.0.2869': attribute type 10 has an invalid length. [ 97.564542][T10213] veth0_vlan: entered allmulticast mode [ 97.570817][T10213] veth0_vlan: left promiscuous mode [ 97.576532][T10213] veth0_vlan: entered promiscuous mode [ 97.583323][T10213] team0: Device veth0_vlan failed to register rx_handler [ 97.613754][T10215] loop0: detected capacity change from 0 to 512 [ 97.623550][T10215] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2870: iget: bad i_size value: 38620345925642 [ 97.636461][T10215] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2870: couldn't read orphan inode 15 (err -117) [ 97.657372][T10215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.686492][T10215] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.2870: bg 0: block 5: invalid block bitmap [ 97.706875][T10215] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 97.719173][T10215] EXT4-fs (loop0): This should not happen!! Data will be lost [ 97.719173][T10215] [ 97.728827][T10215] EXT4-fs (loop0): Total free blocks count 0 [ 97.734894][T10215] EXT4-fs (loop0): Free/Dirty block details [ 97.740813][T10215] EXT4-fs (loop0): free_blocks=0 [ 97.745743][T10215] EXT4-fs (loop0): dirty_blocks=1 [ 97.750796][T10215] EXT4-fs (loop0): Block reservation details [ 97.756774][T10215] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 97.766509][T10224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=10224 comm=syz.2.2873 [ 97.779115][T10224] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=10224 comm=syz.2.2873 [ 97.803913][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.025200][T10252] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2886'. [ 98.409200][T10285] 9pnet: p9_errstr2errno: server reported unknown error tat [ 98.667429][T10296] pimreg: entered allmulticast mode [ 98.675520][T10296] pimreg: left allmulticast mode [ 98.891069][T10307] ipvlan2: entered promiscuous mode [ 98.896980][T10307] bridge0: port 1(ipvlan2) entered blocking state [ 98.903417][T10307] bridge0: port 1(ipvlan2) entered disabled state [ 98.910286][T10307] ipvlan2: entered allmulticast mode [ 98.915595][T10307] bridge0: entered allmulticast mode [ 98.921212][T10307] ipvlan2: left allmulticast mode [ 98.926363][T10307] bridge0: left allmulticast mode [ 99.159739][T10337] loop6: detected capacity change from 0 to 512 [ 99.215692][T10337] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.228466][T10337] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.249368][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.445430][T10359] loop6: detected capacity change from 0 to 512 [ 99.452302][T10359] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 99.464227][T10359] EXT4-fs (loop6): 1 truncate cleaned up [ 99.470069][T10359] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.499568][ T29] kauditd_printk_skb: 122 callbacks suppressed [ 99.499582][ T29] audit: type=1400 audit(2000000017.728:3336): avc: denied { create } for pid=10362 comm="syz.0.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.526661][ T29] audit: type=1400 audit(2000000017.765:3337): avc: denied { connect } for pid=10362 comm="syz.0.2934" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.568419][T10365] loop0: detected capacity change from 0 to 512 [ 99.580372][T10365] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.593436][T10365] ext4 filesystem being mounted at /635/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 99.596719][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.614118][ T29] audit: type=1400 audit(2000000017.840:3338): avc: denied { setattr } for pid=10364 comm="syz.0.2935" path="/635/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 99.642146][T10365] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 99.650037][ T29] audit: type=1400 audit(2000000017.868:3339): avc: denied { write } for pid=10364 comm="syz.0.2935" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 99.682201][ T29] audit: type=1326 audit(2000000017.905:3340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10301 comm="syz.1.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdd352aebe9 code=0x7fc00000 [ 99.708442][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.719039][T10374] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 99.728510][ T29] audit: type=1400 audit(2000000017.943:3341): avc: denied { mac_admin } for pid=10373 comm="+}[@" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 99.750064][ T29] audit: type=1400 audit(2000000017.952:3342): avc: denied { relabelto } for pid=10373 comm="+}[@" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 99.775722][ T29] audit: type=1400 audit(2000000017.952:3343): avc: denied { associate } for pid=10373 comm="+}[@" name="/" dev="cgroup2" ino=1 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 99.807605][T10378] loop0: detected capacity change from 0 to 512 [ 99.820773][T10382] SELinux: policydb version -25284851 does not match my version range 15-35 [ 99.829999][T10382] SELinux: failed to load policy [ 99.830402][T10378] EXT4-fs (loop0): orphan cleanup on readonly fs [ 99.843480][T10378] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2938: bg 0: block 248: padding at end of block bitmap is not set [ 99.858091][T10378] Quota error (device loop0): write_blk: dquota write failed [ 99.865516][T10378] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 99.875451][T10378] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.2938: Failed to acquire dquot type 1 [ 99.887300][T10378] EXT4-fs (loop0): 1 truncate cleaned up [ 99.894004][T10378] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 99.973230][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.019095][T10411] netlink: 'syz.5.2955': attribute type 13 has an invalid length. [ 100.037139][T10411] erspan0: refused to change device tx_queue_len [ 100.044443][T10411] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 100.087193][T10415] pimreg: entered allmulticast mode [ 100.101217][T10415] pimreg: left allmulticast mode [ 100.236372][T10437] macvtap0: refused to change device tx_queue_len [ 100.396240][T10445] netlink: 'syz.6.2971': attribute type 3 has an invalid length. [ 100.498205][T10447] __nla_validate_parse: 5 callbacks suppressed [ 100.498221][T10447] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2972'. [ 100.683930][T10461] SELinux: policydb version -25284851 does not match my version range 15-35 [ 100.712149][T10461] SELinux: failed to load policy [ 100.788654][T10466] SELinux: policydb version 1920 does not match my version range 15-35 [ 100.798307][T10466] SELinux: failed to load policy [ 100.947409][T10475] loop0: detected capacity change from 0 to 8192 [ 101.115247][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811af5fe00: rx timeout, send abort [ 101.252978][T10481] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 101.264281][T10480] IPVS: stopping master sync thread 10481 ... [ 101.368094][T10487] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 101.530209][T10494] loop5: detected capacity change from 0 to 1024 [ 101.537159][T10494] EXT4-fs: Ignoring removed bh option [ 101.543278][T10494] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 101.568808][T10494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.603107][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.649796][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b0e9400: rx timeout, send abort [ 101.658395][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811af5fe00: abort rx timeout. Force session deactivation [ 101.782021][T10502] netlink: 'syz.5.2997': attribute type 1 has an invalid length. [ 101.824777][T10502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.834707][T10505] netlink: '+}[@': attribute type 298 has an invalid length. [ 101.853530][T10502] bond1: (slave geneve2): making interface the new active one [ 101.862380][T10502] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 101.936478][T10516] ALSA: seq fatal error: cannot create timer (-22) [ 101.990513][T10520] IPVS: Error connecting to the multicast addr [ 102.012679][T10524] SELinux: Context system_u:object_r:selinux_config_t:s0 is not valid (left unmapped). [ 102.075118][T10536] loop5: detected capacity change from 0 to 512 [ 102.076183][ T4543] hid_parser_main: 18 callbacks suppressed [ 102.076199][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x1 [ 102.092745][T10536] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.094809][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.107777][T10536] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.114606][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.132420][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.139847][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.149205][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.156647][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.164193][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.171686][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x2 [ 102.179185][ T4543] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 102.187285][ T4543] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 102.187937][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.196870][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b0e9400: abort rx timeout. Force session deactivation [ 102.266835][T10550] loop5: detected capacity change from 0 to 764 [ 102.274160][T10550] rock: directory entry would overflow storage [ 102.280320][T10550] rock: sig=0x4654, size=5, remaining=4 [ 102.334933][T10560] syzkaller1: entered promiscuous mode [ 102.340501][T10560] syzkaller1: entered allmulticast mode [ 102.495193][T10592] loop5: detected capacity change from 0 to 2048 [ 102.504325][T10592] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.520538][T10592] EXT4-fs error (device loop5): empty_inline_dir:1760: inode #12: block 9: comm syz.5.3037: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 102.538841][T10592] EXT4-fs (loop5): Remounting filesystem read-only [ 102.545463][T10592] EXT4-fs warning (device loop5): empty_inline_dir:1767: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 102.567307][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.576779][ T12] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 102.607042][T10600] loop5: detected capacity change from 0 to 512 [ 102.613631][T10600] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 102.738044][T10622] loop2: detected capacity change from 0 to 512 [ 102.745164][T10622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 102.756731][T10622] EXT4-fs (loop2): 1 truncate cleaned up [ 102.762853][T10622] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.856200][T10635] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3055'. [ 102.940854][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.004673][T10656] 9pnet: Could not find request transport: f [ 103.159725][T10678] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3075'. [ 103.270420][T10688] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3079'. [ 103.364659][T10692] loop0: detected capacity change from 0 to 764 [ 103.374502][T10692] rock: directory entry would overflow storage [ 103.380679][T10692] rock: sig=0x4654, size=5, remaining=4 [ 103.581048][T10714] loop2: detected capacity change from 0 to 1024 [ 103.599858][T10714] EXT4-fs: Ignoring removed bh option [ 103.613995][T10714] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 103.690368][T10714] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.749214][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.970235][T10744] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 104.346415][T10784] ALSA: seq fatal error: cannot create timer (-22) [ 104.374735][T10790] loop6: detected capacity change from 0 to 256 [ 104.447806][T10804] loop2: detected capacity change from 0 to 512 [ 104.455789][T10804] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.472726][T10808] loop6: detected capacity change from 0 to 512 [ 104.480690][T10804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.493577][T10808] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 104.494787][T10804] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.553100][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.587963][T10817] loop2: detected capacity change from 0 to 1024 [ 104.595573][T10818] tipc: Started in network mode [ 104.600502][T10818] tipc: Node identity ac141413, cluster identity 4711 [ 104.608408][T10817] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 104.619472][T10817] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 104.630184][T10818] tipc: New replicast peer: 10.1.1.2 [ 104.635638][T10818] tipc: Enabled bearer , priority 10 [ 104.643398][T10817] JBD2: no valid journal superblock found [ 104.649253][T10817] EXT4-fs (loop2): Could not load journal inode [ 104.659451][T10817] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 104.686972][T10828] loop0: detected capacity change from 0 to 128 [ 104.700205][T10828] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 104.719523][T10828] ext4 filesystem being mounted at /672/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.727288][T10835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3148'. [ 104.791453][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 104.863486][T10848] lo speed is unknown, defaulting to 1000 [ 104.880866][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 104.880910][ T29] audit: type=1326 audit(2000000022.760:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 104.910806][ T29] audit: type=1326 audit(2000000022.760:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 104.940165][T10855] 9pnet: p9_errstr2errno: server reported unknown error W~uZz&4 [ 104.960307][ T29] audit: type=1326 audit(2000000022.770:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 104.983859][ T29] audit: type=1326 audit(2000000022.770:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 105.007348][ T29] audit: type=1326 audit(2000000022.770:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 105.030987][ T29] audit: type=1326 audit(2000000022.770:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 105.054512][ T29] audit: type=1326 audit(2000000022.770:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 105.061699][T10857] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3157'. [ 105.078023][ T29] audit: type=1326 audit(2000000022.770:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 105.110552][ T29] audit: type=1326 audit(2000000022.770:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 105.134270][ T29] audit: type=1326 audit(2000000022.770:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10852 comm="syz.1.3158" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdd352aebe9 code=0x7ffc0000 [ 105.176889][T10863] openvswitch: netlink: Message has 6 unknown bytes. [ 105.344738][T10896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3178'. [ 105.376957][T10900] serio: Serial port ttyS3 [ 105.441231][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz1 [ 105.460628][T10913] loop5: detected capacity change from 0 to 128 [ 105.485426][T10913] bio_check_eod: 25110 callbacks suppressed [ 105.485442][T10913] syz.5.3186: attempt to access beyond end of device [ 105.485442][T10913] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 105.505388][T10913] syz.5.3186: attempt to access beyond end of device [ 105.505388][T10913] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 105.519219][T10913] syz.5.3186: attempt to access beyond end of device [ 105.519219][T10913] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 105.533790][T10913] syz.5.3186: attempt to access beyond end of device [ 105.533790][T10913] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 105.548086][T10913] syz.5.3186: attempt to access beyond end of device [ 105.548086][T10913] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 105.569934][T10913] syz.5.3186: attempt to access beyond end of device [ 105.569934][T10913] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 105.587948][T10913] syz.5.3186: attempt to access beyond end of device [ 105.587948][T10913] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 105.609603][T10913] syz.5.3186: attempt to access beyond end of device [ 105.609603][T10913] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 105.624584][T10913] syz.5.3186: attempt to access beyond end of device [ 105.624584][T10913] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 105.638840][T10913] syz.5.3186: attempt to access beyond end of device [ 105.638840][T10913] loop5: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 105.656911][T10929] binfmt_misc: register: failed to install interpreter file ./file2 [ 105.705195][T10938] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3196'. [ 105.777480][T10957] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 105.830864][T10967] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3210'. [ 105.832227][ T4562] tipc: Node number set to 2886997011 [ 105.872479][T10974] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 105.904680][T10980] loop5: detected capacity change from 0 to 1024 [ 105.911491][T10980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 105.933230][T10980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.967285][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.032571][T10997] netlink: 'syz.1.3221': attribute type 21 has an invalid length. [ 106.040723][T10997] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3221'. [ 106.052849][T10996] pim6reg: entered allmulticast mode [ 106.088782][T11005] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11005 comm=syz.0.3226 [ 106.295419][T11033] bond2: entered promiscuous mode [ 106.300459][T11033] bond2: entered allmulticast mode [ 106.305922][T11033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.328196][T11033] bond2 (unregistering): Released all slaves [ 106.354045][T11029] loop6: detected capacity change from 0 to 8192 [ 106.596214][T11064] loop0: detected capacity change from 0 to 512 [ 106.603365][T11064] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.620921][T11064] EXT4-fs (loop0): 1 truncate cleaned up [ 106.630529][T11064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.653176][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.021366][T11094] IPv6: Can't replace route, no match found [ 107.160333][ T4546] kernel read not supported for file /input/event1 (pid: 4546 comm: kworker/1:6) [ 107.197235][T11110] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 107.304439][T11115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=11115 comm=+}[@ [ 107.316556][T11115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=11115 comm=+}[@ [ 107.421521][T11131] loop2: detected capacity change from 0 to 2048 [ 107.479501][T11131] loop2: p1 < > p4 [ 107.484101][T11131] loop2: p4 size 8388608 extends beyond EOD, truncated [ 107.654005][T11153] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 107.690425][T11156] loop2: detected capacity change from 0 to 128 [ 107.706089][T11158] pim6reg: entered allmulticast mode [ 107.753237][T11162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3295'. [ 107.773611][T11162] ip6gretap1: entered allmulticast mode [ 107.801386][T11166] netlink: 'syz.1.3297': attribute type 1 has an invalid length. [ 107.809153][T11166] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3297'. [ 107.899644][T11175] loop6: detected capacity change from 0 to 1024 [ 107.907138][T11175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 107.926877][T11175] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.982741][T11185] netlink: 'syz.1.3304': attribute type 10 has an invalid length. [ 107.997161][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.123701][T11194] SELinux: unknown common socke [ 108.129269][T11194] SELinux: failed to load policy [ 108.164389][T11199] serio: Serial port ttyS3 [ 108.206587][T11205] netlink: 'syz.6.3314': attribute type 21 has an invalid length. [ 108.214528][T11205] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3314'. [ 108.293445][T11215] loop6: detected capacity change from 0 to 512 [ 108.306030][T11219] loop0: detected capacity change from 0 to 1024 [ 108.313111][T11219] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.320542][T11215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.333605][T11215] ext4 filesystem being mounted at /198/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 108.342855][T11219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.346523][T11215] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3319: corrupted inode contents [ 108.368451][T11215] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.3319: mark_inode_dirty error [ 108.380096][T11215] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.3319: corrupted inode contents [ 108.387743][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.392892][T11215] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3319: mark_inode_dirty error [ 108.424872][T11229] netlink: 'syz.0.3320': attribute type 10 has an invalid length. [ 108.443562][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.599054][T11245] serio: Serial port ttyS3 [ 108.609763][T11247] loop6: detected capacity change from 0 to 512 [ 108.620427][T11247] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 108.637739][T11247] EXT4-fs (loop6): 1 truncate cleaned up [ 108.643707][T11247] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.675593][ T8921] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.695542][ T4543] hid_parser_main: 48 callbacks suppressed [ 108.695618][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.708977][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.716358][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.723802][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.731250][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.738696][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.746126][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.753561][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.760971][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.768417][ T4543] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 108.789499][ T4543] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz1 [ 108.998901][T11330] netlink: 'syz.5.3337': attribute type 10 has an invalid length. [ 109.053648][ T167] nci: nci_ntf_packet: unknown ntf opcode 0x102 [ 109.121048][T11338] lo speed is unknown, defaulting to 1000 [ 109.281674][T11354] loop2: detected capacity change from 0 to 512 [ 109.289862][T11354] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.294988][ T4562] kernel read not supported for file /input/event1 (pid: 4562 comm: kworker/1:11) [ 109.318246][T11354] EXT4-fs (loop2): 1 truncate cleaned up [ 109.324277][T11354] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.367433][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.646401][T11373] loop2: detected capacity change from 0 to 512 [ 109.677405][T11373] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.691638][T11373] ext4 filesystem being mounted at /638/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 109.751178][T11373] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz.2.3352: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 109.778721][T11373] EXT4-fs (loop2): Remounting filesystem read-only [ 109.800691][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.817417][T11389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3359'. [ 109.906985][T11400] loop6: detected capacity change from 0 to 128 [ 109.927767][T11400] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 109.947506][T11400] ext4 filesystem being mounted at /208/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.025034][T11408] loop5: detected capacity change from 0 to 512 [ 110.036373][T11408] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.068127][T11408] ext4 filesystem being mounted at /381/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 110.080376][T11414] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11414 comm=syz.2.3370 [ 110.093963][ T8921] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.107344][T11413] SELinux: ebitmap: truncated map [ 110.113269][T11408] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3378: corrupted inode contents [ 110.132516][T11413] SELinux: failed to load policy [ 110.138905][T11408] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.3378: mark_inode_dirty error [ 110.165278][T11408] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3378: corrupted inode contents [ 110.178715][T11418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3372'. [ 110.187793][T11418] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 110.196715][T11408] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3378: mark_inode_dirty error [ 110.213828][T11422] netlink: 'syz.6.3369': attribute type 10 has an invalid length. [ 110.241740][ T6804] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.267713][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 110.267726][ T29] audit: type=1400 audit(2000000027.802:3743): avc: denied { create } for pid=11425 comm="syz.0.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.311594][ T29] audit: type=1400 audit(2000000027.839:3744): avc: denied { ioctl } for pid=11428 comm="syz.2.3375" path="socket:[32161]" dev="sockfs" ino=32161 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 110.351132][ T29] audit: type=1400 audit(2000000027.877:3745): avc: denied { bind } for pid=11425 comm="syz.0.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.388771][ T29] audit: type=1400 audit(2000000027.914:3746): avc: denied { write } for pid=11425 comm="syz.0.3374" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 110.429253][T11435] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 110.442606][T11391] ================================================================== [ 110.450689][T11391] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 110.459273][T11391] [ 110.461588][T11391] write to 0xffff88811dffcd68 of 8 bytes by task 11402 on cpu 0: [ 110.469293][T11391] shmem_file_splice_read+0x470/0x600 [ 110.474655][T11391] splice_direct_to_actor+0x26f/0x680 [ 110.480017][T11391] do_splice_direct+0xda/0x150 [ 110.484778][T11391] do_sendfile+0x380/0x650 [ 110.489198][T11391] __x64_sys_sendfile64+0x105/0x150 [ 110.494402][T11391] x64_sys_call+0x2bb0/0x2ff0 [ 110.499076][T11391] do_syscall_64+0xd2/0x200 [ 110.503763][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.509649][T11391] [ 110.511971][T11391] write to 0xffff88811dffcd68 of 8 bytes by task 11391 on cpu 1: [ 110.519719][T11391] shmem_file_splice_read+0x470/0x600 [ 110.525086][T11391] splice_direct_to_actor+0x26f/0x680 [ 110.530457][T11391] do_splice_direct+0xda/0x150 [ 110.535213][T11391] do_sendfile+0x380/0x650 [ 110.539629][T11391] __x64_sys_sendfile64+0x105/0x150 [ 110.544822][T11391] x64_sys_call+0x2bb0/0x2ff0 [ 110.549492][T11391] do_syscall_64+0xd2/0x200 [ 110.553986][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.559870][T11391] [ 110.562180][T11391] value changed: 0x000000000000d128 -> 0x000000000000d132 [ 110.569276][T11391] [ 110.571585][T11391] Reported by Kernel Concurrency Sanitizer on: [ 110.577728][T11391] CPU: 1 UID: 0 PID: 11391 Comm: syz.1.3362 Not tainted syzkaller #0 PREEMPT(voluntary) [ 110.587518][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.597561][T11391] ==================================================================