last executing test programs: 5m8.938234906s ago: executing program 32 (id=1186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, 0xa, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4000000) 5m5.337474014s ago: executing program 33 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000940)=ANY=[@ANYBLOB="240000001800210200000000000000001d01000008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x000'], 0x24}}, 0x0) 4m55.611946052s ago: executing program 3 (id=1530): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) getitimer(0x1, &(0x7f0000000280)) 4m55.587578544s ago: executing program 3 (id=1534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)={0x30, r1, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}, 0x1, 0x0, 0x0, 0x440a1}, 0x8000) 4m55.520154239s ago: executing program 3 (id=1538): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, {0x2, 0x0, @dev}, {0x2, 0x0, @remote}, {0x2, 0x0, @broadcast}, 0x128}) 4m55.443152275s ago: executing program 3 (id=1541): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 4m55.335912524s ago: executing program 3 (id=1549): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xa0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x800, 0x40) 4m55.293667568s ago: executing program 3 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m54.024105819s ago: executing program 34 (id=1184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x1a1d01) 4m51.118668332s ago: executing program 6 (id=1682): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000000)={0x40000000000000, 0x6, 0x0, 0x7}) 4m50.853134443s ago: executing program 6 (id=1687): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={0x0}, 0x18) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 4m50.779655619s ago: executing program 6 (id=1691): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 4m50.748881651s ago: executing program 6 (id=1693): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000180)={[{@resuid}, {@init_itable}, {@stripe={'stripe', 0x3d, 0xd40}}, {@noblock_validity}]}, 0x7, 0x453, &(0x7f00000009c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 4m50.596594733s ago: executing program 6 (id=1701): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) unshare(0x22020600) open_tree(r0, &(0x7f0000000040)='\x00', 0x89901) 4m50.422904397s ago: executing program 6 (id=1713): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m50.382317031s ago: executing program 35 (id=1713): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000002c0)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 4m43.181738527s ago: executing program 8 (id=1978): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 4m43.122679171s ago: executing program 8 (id=1979): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) 4m43.037551918s ago: executing program 8 (id=1981): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000600), r0) sendmsg$NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdb07250500000008000400ffffffff0800010036"], 0x24}}, 0x20000000) 4m42.960150155s ago: executing program 8 (id=1983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r0, &(0x7f0000000000)='.\x00', 0x0) 4m42.955182194s ago: executing program 8 (id=1985): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) 4m42.8870863s ago: executing program 8 (id=1988): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r0, &(0x7f0000000680)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r1}, 0x80) 4m40.213224414s ago: executing program 36 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x4, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 4m27.877061211s ago: executing program 37 (id=1988): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000580)={'xfrm0\x00', 0x0}) sendto(r0, &(0x7f0000000680)="ca", 0x1, 0x0, &(0x7f0000000240)=@xdp={0x2c, 0x8, r1}, 0x80) 2m8.252134981s ago: executing program 7 (id=8866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x40810, 0x3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_ISOLATED={0x5, 0x21, 0x1}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4000000) 2m8.251815201s ago: executing program 7 (id=8868): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = open_tree(r0, &(0x7f0000000040)='\x00', 0x89901) unshare(0x22020600) move_mount(r1, 0x0, r0, 0x0, 0x46) 2m8.251160591s ago: executing program 7 (id=8869): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) 2m8.232712883s ago: executing program 7 (id=8870): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m8.219053504s ago: executing program 7 (id=8871): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 2m8.040181108s ago: executing program 5 (id=8881): r0 = socket(0xa, 0x1, 0x0) listen(r0, 0x80000001) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10) accept4$packet(r0, 0x0, 0x0, 0x800) 2m8.040022908s ago: executing program 5 (id=8882): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r1, &(0x7f00000003c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x22, 0x0) 2m7.975884223s ago: executing program 7 (id=8884): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a3000000600050001000700000008000940000000011400088010"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2m7.975534663s ago: executing program 5 (id=8885): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x90) write$cgroup_int(r0, &(0x7f0000000300)=0x4078c1d5, 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) syz_clone3(&(0x7f0000004300)={0x200000000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2m7.950059655s ago: executing program 38 (id=8884): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a3000000600050001000700000008000940000000011400088010"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 2m7.835558464s ago: executing program 5 (id=8900): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2m7.817596696s ago: executing program 5 (id=8892): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x2c, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x8}]}}]}, 0x58}}, 0x0) 2m7.549066417s ago: executing program 5 (id=8906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 2m7.548982917s ago: executing program 39 (id=8906): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 630.032229ms ago: executing program 9 (id=14507): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffff9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r0}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 604.862761ms ago: executing program 9 (id=14511): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a3200000000140000001100"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x95e, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "d3b6af", 0x928, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, {[@srh={0x87, 0x0, 0x4, 0x0, 0x9, 0x28, 0x8}], "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"}}}}}, 0x0) 571.626394ms ago: executing program 4 (id=14512): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x37}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000180)={0x3, {{0xa, 0x4e20, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4625, 0x0, @remote, 0xfffffe01}}}, 0x108) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 561.826885ms ago: executing program 4 (id=14514): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcfbdf250301f2800c00180008ac0f00000000001403000000000000000000000000ffffac14142d50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1643619cdf6fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a33694e8a8177618fda682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972ff9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be0400e90000"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) 507.609259ms ago: executing program 4 (id=14516): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r1, 0x0, 0x2) 502.989199ms ago: executing program 9 (id=14519): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 486.190581ms ago: executing program 4 (id=14521): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r0) memfd_create(&(0x7f0000002140)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x05FY\x1c\x04\x0f\x00\x00\x00\x00\x00\x00z[\xc4\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xee9\xdd\x87\xf1\xc5\xa81\xd4\xfb\x8a8t\xd0\v\xe6\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\x8fu\x0fjuX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06D\x83\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xe6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\xf8?=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\t\x00\x00\x00\x00\x00\x00\x00\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x02\xeb6\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x1f\x17\x11$\x88g\xb4\xad\xe5\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0_\xfe7\xd0=5&_\x86m\x8d\x12\x96\xc8\x91\x1dD\x02\x13\xf6r\xa4L\xd3\x93\x8d\x05\x85P\x93\xa9\xc0\xda\x9b\xb9\xafZ\xd7W\xcb\xd7\x1fZq\x86%\x9a\rcb\x96\xfeI\t\x9c\a\xcc+\x9d\n\x18k9\x16y\xf0\xf1\xad\xb4\xdeOR-\x89\xc6%\x06\x05zB\xcc\xe1\xa1\x11P\xd2u\'o\xee\xc3|\xb4\xe3\xc8]\x11\x7f\x17\x8dS\xb4\xd1\x1a\fjF\xab\xcf\"y\f\x85\xb0s\xc8\xec\xa6Y\xe22\x9c_}\aq\xec\xc4\x124\x9e`\xf5\xd1~\xd6x\xa9\x95\v\xac\xea\x0f^\xa3\xc3:\xd6fC\xfc\xf0\xb6\x8c\xf7cF\x9a\x97\x83GMJ\xf2A\x0e\xecrg\xf6\xc039\xb8\b\x85\x9fu\x84Am\xc67\xae\xee\xce-E@4\n\xab9rB\xed\xf7\x86\'\xb3\x04\f\xb5\xc3\x82\xd9WO\xe2\x92\xf9\xb5\x93\xe67\xb1\xc8x\xa3\xf6fs\x88\x81\x80\x1ck\"\xe4\xc3A\xee\xec\x8ea+\xcbFEm\"\xf1\x19/\x1f\x8e\xe2C\xb3\v(\x16\xc8bI\n\x95|\xb8.\x05\x80\xbeu=4\x95\xb9\xa1\x06\x16\xd8.\xd5\xa0\xc5\x7f\x97\xed05\x18\x0f\xf4\f\xcf\x1f\x8b\xa1\xb1<\xe7G\xc6\xb1%\xef\x94\x9e\x1f\x1d\xb4 b\xe8p\xd7c\xb0i\xa0\x19k\xe3\xce\x93\xd9\x03\x95L4\"1\x80\x05\xe3\x03\xfb\x81\xcc\xe6Du\x06\xe6wX0\x16\xc5_=\xe7&\x8eU\xdf\xb0OZ\x02\x19Y\x13\x16:\a\x89PI\x98\xd9\xffxh6\x13\x1co1_F\x02\x9d\xc9\xe4E\xb7\x1a\xa2&H\xef\x06\x89v\x85\xfek*\x91W\x01\x00\x00\x00\x00\x00\x00\x00\x0fX\x139o\x83\xbe\xdb\xa55D\xcbt\xb4y%\xe6j\xeb\xe7H\xe1\xe2\x9c\x7f5a\xb1&\x88\x9c\x98\\{\x8d\xbb\x92\xfa\x96j\xf4T\xd2d-\xf8dIz\x1f\x0eZ\xb5\x120A\xb8\x0f\ne\x19^\xccz\x11\xca\f\xda\x89\x8fuS(G&\xe2\xd0ky\xe7n\xc7\xfcz\x84U\xc1\xf0\xe0\xc5\xbf\xb1\xfa\xd4\xe5)\xad\xcbp\xce\x8b\xddq\xb8E\xe6+\xd2\xea\f\x16\xe1\xc2\xdaN\xce\b\xe21X\xee\x80n\x10\xfd\x03_L=@\xddR\xb5\xa5\"\xcb\xdf\xc5\xd8\n,Go\xa6u\xe0\v\x86\x9da\xda\x11\xd5>\xfea\xa1|\xe5\x7f\xab\x94\xec\x87\x11:$\xf2\x9a\x99', 0x0) fsetxattr$trusted_overlay_redirect(r0, &(0x7f00000001c0), 0x0, 0x0, 0x3) 436.027485ms ago: executing program 1 (id=14522): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) shmget(0x2, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) 435.881125ms ago: executing program 4 (id=14523): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffff9}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000fc0)={{r0}, &(0x7f0000000f40), &(0x7f0000000f80)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 435.550225ms ago: executing program 9 (id=14525): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000003140)=""/4111) 410.032067ms ago: executing program 4 (id=14526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback, 0x7}, 0x1c) 409.400997ms ago: executing program 9 (id=14527): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2}, 0x94) 408.805557ms ago: executing program 1 (id=14528): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) time(0x0) 380.49585ms ago: executing program 1 (id=14540): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x23}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}], {0x14, 0x10}}, 0xa4}}, 0x4) 328.492184ms ago: executing program 9 (id=14532): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x4004550e, 0x0) 322.534084ms ago: executing program 1 (id=14533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000060a010400000000000000000a0000030900010073797a31000000002400048020000180070001006374000014000280080002400000000108000140000000090900020073797a3200000000140000001100"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x95e, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "d3b6af", 0x928, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, {[@srh={0x87, 0x0, 0x4, 0x0, 0x9, 0x28, 0x8}], "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"}}}}}, 0x0) 245.5087ms ago: executing program 1 (id=14538): r0 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x2180200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x21000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x1fe) 196.097814ms ago: executing program 2 (id=14539): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a06000908010014001a80100004800c"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) 195.766884ms ago: executing program 1 (id=14542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x1) fallocate(r1, 0x0, 0x0, 0x8000c62) 195.667404ms ago: executing program 2 (id=14550): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) setrlimit(0x9, &(0x7f0000000000)) 176.982816ms ago: executing program 2 (id=14543): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0x8) 138.965949ms ago: executing program 2 (id=14544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) 106.601961ms ago: executing program 2 (id=14547): syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_SCRNMAP(r0, 0x4b49, &(0x7f0000003140)=""/4111) 95.563232ms ago: executing program 0 (id=14548): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r2, &(0x7f0000000040), 0x0}, 0x20) 83.064403ms ago: executing program 0 (id=14549): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r1}, 0xc) 75.235824ms ago: executing program 2 (id=14551): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdde, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x301, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xa000000}]}]}, 0x5c}}, 0x0) 58.425035ms ago: executing program 0 (id=14552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0xdfa}]}}, 0x0, 0x26, 0x0, 0xa, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x760}}, &(0x7f0000000240)='GPL\x00', 0x1, 0x12, &(0x7f0000000280)=""/18, 0x40f00, 0x8, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000440)={0x5, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x11440, r0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 31.016137ms ago: executing program 0 (id=14553): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000000)=0xc, 0x4) 290.299µs ago: executing program 0 (id=14554): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) 0s ago: executing program 0 (id=14555): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @local, 0x9}, 0x1c) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0x8) kernel console output (not intermixed with test programs): .771086][T30533] EXT4-fs (loop0): This should not happen!! Data will be lost [ 309.771086][T30533] [ 309.780808][T30533] EXT4-fs (loop0): Total free blocks count 0 [ 309.786812][T30533] EXT4-fs (loop0): Free/Dirty block details [ 309.792727][T30533] EXT4-fs (loop0): free_blocks=20480 [ 309.798191][T30533] EXT4-fs (loop0): dirty_blocks=96 [ 309.803408][T30533] EXT4-fs (loop0): Block reservation details [ 309.809380][T30533] EXT4-fs (loop0): i_reserved_data_blocks=6 [ 309.912705][ T3440] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 309.930145][T30549] loop9: detected capacity change from 0 to 512 [ 309.937682][T30549] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 309.949183][T30549] EXT4-fs (loop9): 1 truncate cleaned up [ 309.965033][T30549] EXT4-fs error (device loop9): ext4_xattr_block_find:1869: inode #15: comm syz.9.12093: corrupted xattr block 33: invalid header [ 310.148419][T30553] netlink: 'syz.2.12080': attribute type 1 has an invalid length. [ 310.166625][T30558] loop9: detected capacity change from 0 to 512 [ 310.174169][T30558] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 310.185371][T30558] EXT4-fs (loop9): 1 truncate cleaned up [ 310.226307][T30558] EXT4-fs error (device loop9): ext4_xattr_block_find:1869: inode #15: comm syz.9.12095: corrupted xattr block 33: invalid header [ 310.240146][T30564] loop2: detected capacity change from 0 to 512 [ 310.241194][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12088'. [ 310.278366][T30567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12088'. [ 310.293488][T30571] loop2: detected capacity change from 0 to 512 [ 310.410587][T30582] loop2: detected capacity change from 0 to 1024 [ 310.419404][T30583] loop9: detected capacity change from 0 to 512 [ 310.454681][T30582] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 310.483740][T30582] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 310.496174][T30582] EXT4-fs (loop2): This should not happen!! Data will be lost [ 310.496174][T30582] [ 310.505806][T30582] EXT4-fs (loop2): Total free blocks count 0 [ 310.511784][T30582] EXT4-fs (loop2): Free/Dirty block details [ 310.517657][T30582] EXT4-fs (loop2): free_blocks=20480 [ 310.522992][T30582] EXT4-fs (loop2): dirty_blocks=96 [ 310.528107][T30582] EXT4-fs (loop2): Block reservation details [ 310.534107][T30582] EXT4-fs (loop2): i_reserved_data_blocks=6 [ 310.577712][T30592] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12100'. [ 310.630674][ T1719] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 310.642876][ T1719] EXT4-fs (loop2): This should not happen!! Data will be lost [ 310.642876][ T1719] [ 310.660940][T30597] netlink: 'syz.9.12099': attribute type 1 has an invalid length. [ 310.687814][T30599] loop1: detected capacity change from 0 to 512 [ 310.718873][T30605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12104'. [ 310.769210][T30605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12104'. [ 310.771766][T30611] netlink: 79 bytes leftover after parsing attributes in process `syz.9.12111'. [ 310.821492][T30615] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12114'. [ 310.831091][T30617] netdevsim netdevsim1: Direct firmware load for ./file0/file1 failed with error -2 [ 310.867153][T30625] loop4: detected capacity change from 0 to 1024 [ 310.898932][T30632] loop0: detected capacity change from 0 to 512 [ 310.911690][T30625] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 310.927673][T30625] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28 [ 310.940051][T30625] EXT4-fs (loop4): This should not happen!! Data will be lost [ 310.940051][T30625] [ 310.949849][T30625] EXT4-fs (loop4): Total free blocks count 0 [ 310.956696][T30625] EXT4-fs (loop4): Free/Dirty block details [ 310.962648][T30625] EXT4-fs (loop4): free_blocks=20480 [ 310.967924][T30625] EXT4-fs (loop4): dirty_blocks=96 [ 310.973022][T30625] EXT4-fs (loop4): Block reservation details [ 310.978972][T30625] EXT4-fs (loop4): i_reserved_data_blocks=6 [ 310.995159][ T31] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 311.007359][ T31] EXT4-fs (loop4): This should not happen!! Data will be lost [ 311.007359][ T31] [ 311.020911][T30643] netlink: 79 bytes leftover after parsing attributes in process `syz.1.12126'. [ 311.066285][T30653] netdevsim netdevsim4: Direct firmware load for ./file0/file1 failed with error -2 [ 311.222255][T30678] netlink: 79 bytes leftover after parsing attributes in process `syz.4.12140'. [ 311.563179][T30682] netlink: 79 bytes leftover after parsing attributes in process `syz.0.12153'. [ 311.598353][T30690] netdevsim netdevsim9: Direct firmware load for ./file0/file1 failed with error -2 [ 311.599699][T30692] loop0: detected capacity change from 0 to 128 [ 311.618146][T30692] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 311.626083][T30692] FAT-fs (loop0): Filesystem has been set read-only [ 311.633946][T30692] syz.0.12146: attempt to access beyond end of device [ 311.633946][T30692] loop0: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 311.653000][T30692] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 311.660863][T30692] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000100) [ 311.671577][T30692] syz.0.12146: attempt to access beyond end of device [ 311.671577][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.685779][T30692] syz.0.12146: attempt to access beyond end of device [ 311.685779][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.699565][T30692] syz.0.12146: attempt to access beyond end of device [ 311.699565][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.725523][T30692] syz.0.12146: attempt to access beyond end of device [ 311.725523][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.751996][T30692] syz.0.12146: attempt to access beyond end of device [ 311.751996][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.765874][T30692] syz.0.12146: attempt to access beyond end of device [ 311.765874][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.801474][T30692] syz.0.12146: attempt to access beyond end of device [ 311.801474][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.819704][T30692] syz.0.12146: attempt to access beyond end of device [ 311.819704][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 311.841441][T30692] syz.0.12146: attempt to access beyond end of device [ 311.841441][T30692] loop0: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 312.203573][T30774] tap0: tun_chr_ioctl cmd 1074025676 [ 312.208961][T30774] tap0: owner set to 60928 [ 312.494923][T30813] netlink: 8 bytes leftover after parsing attributes in process `syz.9.12216'. [ 312.516282][T30815] tap0: tun_chr_ioctl cmd 1074025676 [ 312.521653][T30815] tap0: owner set to 60928 [ 312.563221][T30821] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 312.572195][T30821] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 312.674320][T30839] loop1: detected capacity change from 0 to 128 [ 312.689038][T30839] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 312.696934][T30839] FAT-fs (loop1): Filesystem has been set read-only [ 312.703962][T30839] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 312.705590][T30845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12221'. [ 312.711795][T30839] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 312.754289][T30851] (unnamed net_device) (uninitialized): ARP target 9.0.0.0 is already present [ 312.763190][T30851] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (9) [ 313.551041][T30855] tap0: tun_chr_ioctl cmd 1074025676 [ 313.556364][T30855] tap0: owner set to 60928 [ 313.567959][T30860] loop2: detected capacity change from 0 to 764 [ 313.576142][T30860] Symlink component flag not implemented [ 313.582137][T30860] Symlink component flag not implemented (101) [ 314.285538][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 314.285553][ T29] audit: type=1326 audit(2000000046.220:107394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.2.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 314.315964][ T29] audit: type=1326 audit(2000000046.220:107395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.2.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 314.340235][ T29] audit: type=1326 audit(2000000046.250:107396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.2.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 314.364014][ T29] audit: type=1326 audit(2000000046.250:107397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.2.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 314.387801][ T29] audit: type=1326 audit(2000000046.250:107398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30866 comm="syz.2.12230" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 314.450314][ T29] audit: type=1326 audit(2000000046.390:107399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.0.12236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 314.474058][ T29] audit: type=1326 audit(2000000046.390:107400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.0.12236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 314.513058][ T29] audit: type=1326 audit(2000000046.390:107401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.0.12236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=213 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 314.536848][ T29] audit: type=1326 audit(2000000046.390:107402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.0.12236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 314.560615][ T29] audit: type=1326 audit(2000000046.390:107403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30878 comm="syz.0.12236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 314.616324][T30884] block device autoloading is deprecated and will be removed. [ 314.625487][T30884] loop0: detected capacity change from 0 to 764 [ 314.636223][T30884] Symlink component flag not implemented [ 314.642847][T30884] Symlink component flag not implemented (101) [ 314.893559][T30948] loop4: detected capacity change from 0 to 1024 [ 314.914673][T29431] block device autoloading is deprecated and will be removed. [ 314.942176][T30948] EXT4-fs mount: 10 callbacks suppressed [ 314.942190][T30948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 314.988201][T30948] ext4 filesystem being mounted at /700/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.001815][T30957] loop2: detected capacity change from 0 to 8192 [ 315.054227][ T390] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 315.082374][ T390] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 315.094708][ T390] EXT4-fs (loop4): This should not happen!! Data will be lost [ 315.094708][ T390] [ 315.136906][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 315.207143][T30977] loop4: detected capacity change from 0 to 8192 [ 315.317095][T29431] block device autoloading is deprecated and will be removed. [ 315.383966][T30999] loop9: detected capacity change from 0 to 1024 [ 315.417428][T30999] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 315.465841][T30999] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 315.492494][ T390] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: comm kworker/u8:5: lblock 0 mapped to illegal pblock 0 (length 1) [ 315.506335][ T390] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 315.518659][ T390] EXT4-fs (loop9): This should not happen!! Data will be lost [ 315.518659][ T390] [ 315.529262][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 315.559303][T31026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12302'. [ 315.831754][T31056] loop2: detected capacity change from 0 to 2048 [ 315.869897][T31056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 315.986104][T31062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12320'. [ 316.180004][T31069] loop9: detected capacity change from 0 to 1024 [ 316.186581][T31069] EXT4-fs: Ignoring removed orlov option [ 316.198774][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.225774][T31075] netlink: 156 bytes leftover after parsing attributes in process `syz.4.12328'. [ 316.245446][T31075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12328'. [ 316.255483][T31069] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.317035][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.550861][T31104] netlink: 156 bytes leftover after parsing attributes in process `syz.9.12341'. [ 316.560423][T31104] netlink: 4 bytes leftover after parsing attributes in process `syz.9.12341'. [ 316.571627][T31103] loop0: detected capacity change from 0 to 2048 [ 316.597062][T31103] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.614276][T31112] loop4: detected capacity change from 0 to 1024 [ 316.621176][T31112] EXT4-fs: Ignoring removed orlov option [ 316.642207][T31112] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.701757][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.760204][T31132] lo speed is unknown, defaulting to 1000 [ 316.859814][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.914035][T31138] lo speed is unknown, defaulting to 1000 [ 316.941066][T31142] netlink: 'syz.0.12355': attribute type 25 has an invalid length. [ 317.008107][T31149] netlink: 12 bytes leftover after parsing attributes in process `syz.9.12358'. [ 317.314924][T31158] netlink: 'syz.9.12361': attribute type 15 has an invalid length. [ 317.323026][T31160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12373'. [ 317.432271][T31174] loop1: detected capacity change from 0 to 2048 [ 317.440925][T31178] netlink: 'syz.9.12369': attribute type 25 has an invalid length. [ 317.465833][T31174] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 317.639571][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.682716][T31191] netlink: 64859 bytes leftover after parsing attributes in process `syz.9.12388'. [ 317.693695][T31186] lo speed is unknown, defaulting to 1000 [ 317.750315][T31202] netlink: 'syz.0.12376': attribute type 15 has an invalid length. [ 317.863186][T31224] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.12391'. [ 317.938531][T31232] lo speed is unknown, defaulting to 1000 [ 318.143255][T31251] lo speed is unknown, defaulting to 1000 [ 318.220695][T31260] loop4: detected capacity change from 0 to 512 [ 318.228049][T31260] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 318.268994][T31260] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.286494][T31260] ext4 filesystem being mounted at /718/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.311353][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.686855][T31270] loop0: detected capacity change from 0 to 512 [ 318.696286][T31270] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 318.722382][T31270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.754530][T31270] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.815498][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.959392][T31303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12424'. [ 318.960481][T31302] loop9: detected capacity change from 0 to 512 [ 319.527025][ T29] kauditd_printk_skb: 88 callbacks suppressed [ 319.527058][ T29] audit: type=1326 audit(2000000004.802:107492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.0.12434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 319.556893][ T29] audit: type=1326 audit(2000000004.802:107493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.0.12434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 319.598671][ T29] audit: type=1326 audit(2000000004.802:107494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.0.12434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 319.622424][ T29] audit: type=1326 audit(2000000004.802:107495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.0.12434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 319.646206][ T29] audit: type=1326 audit(2000000004.802:107496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31322 comm="syz.0.12434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 319.725586][T31339] loop0: detected capacity change from 0 to 512 [ 320.571004][T31364] loop4: detected capacity change from 0 to 512 [ 320.580851][T31364] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.12452: iget: bad i_size value: 38620345925642 [ 320.596612][T31364] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.12452: couldn't read orphan inode 15 (err -117) [ 320.610005][T31364] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.635797][ T1719] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 320.667475][ T1719] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 320.679752][ T1719] EXT4-fs (loop4): This should not happen!! Data will be lost [ 320.679752][ T1719] [ 320.689476][ T1719] EXT4-fs (loop4): Total free blocks count 0 [ 320.695457][ T1719] EXT4-fs (loop4): Free/Dirty block details [ 320.701410][ T1719] EXT4-fs (loop4): free_blocks=0 [ 320.706352][ T1719] EXT4-fs (loop4): dirty_blocks=1 [ 320.711416][ T1719] EXT4-fs (loop4): Block reservation details [ 320.717449][ T1719] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 320.724993][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.821900][T31383] loop4: detected capacity change from 0 to 1024 [ 320.836489][T31383] EXT4-fs: inline encryption not supported [ 320.846363][T31383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.873725][ T29] audit: type=1400 audit(2000000006.143:107497): avc: denied { remove_name } for pid=31381 comm="syz.4.12462" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.896720][ T29] audit: type=1400 audit(2000000006.143:107498): avc: denied { rmdir } for pid=31381 comm="syz.4.12462" name="file1" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 320.940734][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.017035][T31393] loop9: detected capacity change from 0 to 1024 [ 321.036771][T31393] EXT4-fs: inline encryption not supported [ 321.060685][T31393] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.117703][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.126966][T31407] loop1: detected capacity change from 0 to 512 [ 321.135757][T31407] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.12469: iget: bad i_size value: 38620345925642 [ 321.150306][T31407] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.12469: couldn't read orphan inode 15 (err -117) [ 321.162646][T31407] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.192702][ T41] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm kworker/u8:2: bg 0: block 5: invalid block bitmap [ 321.206609][ T41] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 321.218879][ T41] EXT4-fs (loop1): This should not happen!! Data will be lost [ 321.218879][ T41] [ 321.228524][ T41] EXT4-fs (loop1): Total free blocks count 0 [ 321.234495][ T41] EXT4-fs (loop1): Free/Dirty block details [ 321.240442][ T41] EXT4-fs (loop1): free_blocks=0 [ 321.245469][ T41] EXT4-fs (loop1): dirty_blocks=1 [ 321.250484][ T41] EXT4-fs (loop1): Block reservation details [ 321.256468][ T41] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 321.267577][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.353895][ T29] audit: type=1400 audit(2000000006.623:107499): avc: denied { ioctl } for pid=31411 comm="syz.4.12475" path="/dev/input/event2" dev="devtmpfs" ino=252 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 321.380181][T31414] loop9: detected capacity change from 0 to 512 [ 321.409463][T31414] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.422394][T31414] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.448326][T31426] tmpfs: Unknown parameter 'smackfstransmute' [ 321.454924][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.470818][T31429] loop0: detected capacity change from 0 to 512 [ 321.478308][ T29] audit: type=1326 audit(2000000006.753:107500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.1.12481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 321.504413][ T29] audit: type=1326 audit(2000000006.763:107501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31427 comm="syz.1.12481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 321.530584][T31429] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.544442][T31429] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 321.583538][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.612889][T31443] loop2: detected capacity change from 0 to 1024 [ 321.619889][T31443] EXT4-fs: inline encryption not supported [ 321.642091][T31443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.668418][T31455] __nla_validate_parse: 3 callbacks suppressed [ 321.668429][T31455] netlink: 404 bytes leftover after parsing attributes in process `syz.1.12489'. [ 321.685213][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.686048][T31457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.701441][T31457] IPv6: NLM_F_CREATE should be set when creating new route [ 321.708639][T31457] IPv6: NLM_F_CREATE should be set when creating new route [ 321.715978][T31457] IPv6: NLM_F_CREATE should be set when creating new route [ 321.723548][T31457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.760362][T31462] tmpfs: Unknown parameter 'smackfstransmute' [ 321.766498][T31463] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12495'. [ 322.247442][T31485] loop4: detected capacity change from 0 to 1024 [ 322.254483][T31485] EXT4-fs: inline encryption not supported [ 322.271704][T31487] netlink: 404 bytes leftover after parsing attributes in process `syz.2.12506'. [ 322.283800][T31485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.307501][T31491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.314714][T31491] IPv6: NLM_F_CREATE should be set when creating new route [ 322.321936][T31491] IPv6: NLM_F_CREATE should be set when creating new route [ 322.329193][T31491] IPv6: NLM_F_CREATE should be set when creating new route [ 322.338677][T31491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.366472][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.392264][T31497] loop1: detected capacity change from 0 to 1024 [ 322.399218][T31497] EXT4-fs: inline encryption not supported [ 322.432388][T31497] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.449991][T31505] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12511'. [ 322.477083][T31503] vhci_hcd: invalid port number 96 [ 322.482219][T31503] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 322.491037][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.543535][T31516] loop2: detected capacity change from 0 to 512 [ 322.565202][T31516] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 322.573146][T31516] System zones: 1-12 [ 322.577930][T31516] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.12516: Directory hole found for htree index block 0 [ 322.590911][T31516] EXT4-fs (loop2): Remounting filesystem read-only [ 322.598657][T31516] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117 [ 322.607181][T31516] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 322.616831][T31516] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.632845][T31516] EXT4-fs (loop2): shut down requested (2) [ 322.649040][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.749802][T31521] netlink: 404 bytes leftover after parsing attributes in process `syz.9.12519'. [ 322.857796][T31542] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12527'. [ 322.869723][T31538] loop9: detected capacity change from 0 to 1024 [ 322.878729][T31538] EXT4-fs: inline encryption not supported [ 322.888710][T31544] vhci_hcd: invalid port number 96 [ 322.893831][T31544] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 322.910355][T31538] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.974310][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.000693][T31562] loop4: detected capacity change from 0 to 512 [ 323.011969][T31562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 323.014918][T31560] netlink: 404 bytes leftover after parsing attributes in process `syz.9.12537'. [ 323.020882][T31562] System zones: 1-12 [ 323.033128][T31562] EXT4-fs error (device loop4): dx_probe:791: inode #2: comm syz.4.12535: Directory hole found for htree index block 0 [ 323.045912][T31562] EXT4-fs (loop4): Remounting filesystem read-only [ 323.052474][T31562] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 323.060727][T31562] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 323.069641][T31562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.118110][T31562] EXT4-fs (loop4): shut down requested (2) [ 323.134379][T31569] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12552'. [ 323.152431][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.232289][T31584] loop4: detected capacity change from 0 to 1764 [ 323.265689][T31595] loop1: detected capacity change from 0 to 512 [ 323.275544][T31595] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.288084][T31595] ext4 filesystem being mounted at /433/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.315879][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.339552][T31605] loop0: detected capacity change from 0 to 512 [ 323.351138][T31605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 323.359216][T31605] System zones: 1-12 [ 323.363246][T31605] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.12556: Directory hole found for htree index block 0 [ 323.377132][T31605] EXT4-fs (loop0): Remounting filesystem read-only [ 323.383637][T31605] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 323.419969][T31605] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 323.428809][T31605] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.444707][T31605] EXT4-fs (loop0): shut down requested (2) [ 323.467946][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.486572][T31621] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12566'. [ 323.489149][T31623] loop9: detected capacity change from 0 to 1764 [ 323.555937][T31627] loop0: detected capacity change from 0 to 512 [ 323.601917][T31627] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.664004][T31627] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.703037][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.746163][T31645] loop1: detected capacity change from 0 to 512 [ 323.772773][T31647] loop0: detected capacity change from 0 to 512 [ 323.781210][T31647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002] [ 323.790188][T31647] System zones: 1-12 [ 323.791723][T31645] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.794397][T31647] EXT4-fs error (device loop0): dx_probe:791: inode #2: comm syz.0.12578: Directory hole found for htree index block 0 [ 323.807709][T31645] ext4 filesystem being mounted at /439/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.831119][T31647] EXT4-fs (loop0): Remounting filesystem read-only [ 323.837925][T31647] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 323.846158][T31647] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 323.854734][T31647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.871692][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.890356][T31647] EXT4-fs (loop0): shut down requested (2) [ 323.912074][T31659] loop1: detected capacity change from 0 to 1764 [ 323.918754][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.987889][T31670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12584'. [ 324.063100][T31683] loop4: detected capacity change from 0 to 512 [ 324.087032][T31683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.100088][T31683] ext4 filesystem being mounted at /755/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.165910][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.238737][T31713] netlink: 'syz.0.12605': attribute type 1 has an invalid length. [ 324.297579][T31723] netlink: 'syz.4.12621': attribute type 1 has an invalid length. [ 324.309022][T31726] loop9: detected capacity change from 0 to 512 [ 324.338419][T31726] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 324.351597][T31726] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 324.426480][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.483763][T31758] loop1: detected capacity change from 0 to 1024 [ 324.540967][T31758] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.571784][T31758] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 324.587888][T31758] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 324.600141][T31758] EXT4-fs (loop1): This should not happen!! Data will be lost [ 324.600141][T31758] [ 324.609780][T31758] EXT4-fs (loop1): Total free blocks count 0 [ 324.615833][T31758] EXT4-fs (loop1): Free/Dirty block details [ 324.621827][T31758] EXT4-fs (loop1): free_blocks=20480 [ 324.622718][T31771] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 4 with error 28 [ 324.627107][T31758] EXT4-fs (loop1): dirty_blocks=80 [ 324.627122][T31758] EXT4-fs (loop1): Block reservation details [ 324.639387][T31771] EXT4-fs (loop1): This should not happen!! Data will be lost [ 324.639387][T31771] [ 324.763067][ T29] kauditd_printk_skb: 75 callbacks suppressed [ 324.763081][ T29] audit: type=1400 audit(2000000012.042:107577): avc: denied { read } for pid=31786 comm="syz.4.12639" path="socket:[103478]" dev="sockfs" ino=103478 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 324.828903][T31801] loop0: detected capacity change from 0 to 1024 [ 324.844515][T31801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.859644][T31801] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 324.876008][T31801] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 324.888217][T31801] EXT4-fs (loop0): This should not happen!! Data will be lost [ 324.888217][T31801] [ 324.897909][T31801] EXT4-fs (loop0): Total free blocks count 0 [ 324.904125][T31801] EXT4-fs (loop0): Free/Dirty block details [ 324.910012][T31801] EXT4-fs (loop0): free_blocks=20480 [ 324.915627][T31801] EXT4-fs (loop0): dirty_blocks=80 [ 324.919478][ T29] audit: type=1400 audit(2000000012.192:107578): avc: denied { recv } for pid=31800 comm="syz.0.12646" saddr=10.128.0.163 src=36368 daddr=10.128.1.159 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 324.920735][T31801] EXT4-fs (loop0): Block reservation details [ 324.920745][T31801] EXT4-fs (loop0): i_reserved_data_blocks=5 [ 324.946881][T31810] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 4 with error 28 [ 325.112308][T31826] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 325.167549][ T29] audit: type=1326 audit(2000000012.442:107579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.205097][ T29] audit: type=1326 audit(2000000012.442:107580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.229040][ T29] audit: type=1326 audit(2000000012.442:107581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.252818][ T29] audit: type=1326 audit(2000000012.442:107582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.276660][ T29] audit: type=1326 audit(2000000012.462:107583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.300464][ T29] audit: type=1326 audit(2000000012.462:107584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.324558][ T29] audit: type=1326 audit(2000000012.502:107585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.348361][ T29] audit: type=1326 audit(2000000012.502:107586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31833 comm="syz.4.12659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 325.752891][T31865] netdevsim netdevsim9: Direct firmware load for ./file0 failed with error -2 [ 325.943303][T31895] netlink: 'syz.4.12677': attribute type 21 has an invalid length. [ 325.951236][T31895] netlink: 'syz.4.12677': attribute type 1 has an invalid length. [ 326.057225][T31910] lo speed is unknown, defaulting to 1000 [ 326.659776][T31922] lo speed is unknown, defaulting to 1000 [ 326.716826][T31937] netlink: 'syz.1.12698': attribute type 21 has an invalid length. [ 326.724870][T31937] netlink: 'syz.1.12698': attribute type 1 has an invalid length. [ 326.732690][T31937] __nla_validate_parse: 4 callbacks suppressed [ 326.732765][T31937] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.12698'. [ 326.825015][T31948] lo speed is unknown, defaulting to 1000 [ 326.894847][T31965] lo speed is unknown, defaulting to 1000 [ 327.116864][T31978] lo speed is unknown, defaulting to 1000 [ 327.329164][T32005] lo speed is unknown, defaulting to 1000 [ 327.461701][T32024] loop9: detected capacity change from 0 to 1024 [ 327.480911][T32024] EXT4-fs (loop9): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.494193][T32024] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.518768][T32024] EXT4-fs error (device loop9): ext4_map_blocks:814: inode #15: block 4: comm syz.9.12752: lblock 4 mapped to illegal pblock 4 (length 1) [ 327.533330][T32024] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 327.545643][T32024] EXT4-fs (loop9): This should not happen!! Data will be lost [ 327.545643][T32024] [ 327.593501][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 327.803894][T32062] tap0: tun_chr_ioctl cmd 1074025677 [ 327.809339][T32062] tap0: linktype set to 6 [ 327.870634][T32080] loop2: detected capacity change from 0 to 1024 [ 327.882775][T32080] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 327.894949][T32080] ext4 filesystem being mounted at /711/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.909156][T32080] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 4: comm syz.2.12764: lblock 4 mapped to illegal pblock 4 (length 1) [ 327.923518][T32080] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 117 [ 327.935821][T32080] EXT4-fs (loop2): This should not happen!! Data will be lost [ 327.935821][T32080] [ 327.968125][T32087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12772'. [ 327.977389][T32087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12772'. [ 327.986521][T32087] netlink: 108 bytes leftover after parsing attributes in process `syz.1.12772'. [ 328.002371][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 328.052736][T32095] netlink: 176 bytes leftover after parsing attributes in process `syz.4.12776'. [ 328.069553][T32100] netlink: 108 bytes leftover after parsing attributes in process `syz.9.12786'. [ 328.078885][T32100] netlink: 108 bytes leftover after parsing attributes in process `syz.9.12786'. [ 328.088023][T32100] netlink: 108 bytes leftover after parsing attributes in process `syz.9.12786'. [ 328.102163][T32103] loop2: detected capacity change from 0 to 1024 [ 328.108897][T32103] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.116004][T32103] EXT4-fs: Ignoring removed orlov option [ 328.172711][T32118] tap0: tun_chr_ioctl cmd 1074025677 [ 328.178108][T32118] tap0: linktype set to 6 [ 328.226010][T32130] netlink: 176 bytes leftover after parsing attributes in process `syz.2.12790'. [ 328.326658][T32146] loop4: detected capacity change from 0 to 1024 [ 328.334022][T32146] EXT4-fs: Ignoring removed mblk_io_submit option [ 328.340547][T32146] EXT4-fs: Ignoring removed orlov option [ 328.415852][T32151] loop1: detected capacity change from 0 to 8192 [ 328.507307][T32156] netlink: 'syz.9.12802': attribute type 12 has an invalid length. [ 328.517790][T32163] loop4: detected capacity change from 0 to 512 [ 328.524768][T32163] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 328.537289][T32163] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 328.545788][T32163] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.12805: corrupted in-inode xattr: e_value size too large [ 328.560301][T32163] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.12805: couldn't read orphan inode 15 (err -117) [ 329.312826][T32193] netlink: 'syz.0.12817': attribute type 12 has an invalid length. [ 329.590140][T32215] loop0: detected capacity change from 0 to 8192 [ 330.727311][T32282] netlink: 'syz.4.12861': attribute type 3 has an invalid length. [ 330.735171][T32282] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12861'. [ 330.752729][ T29] kauditd_printk_skb: 40 callbacks suppressed [ 330.752742][ T29] audit: type=1400 audit(330.478:107627): avc: denied { getopt } for pid=32287 comm="syz.0.12863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 330.876717][ T29] audit: type=1326 audit(330.598:107628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 330.921079][ T29] audit: type=1326 audit(330.598:107629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 330.944303][ T29] audit: type=1326 audit(330.628:107630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 330.967418][ T29] audit: type=1326 audit(330.628:107631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 330.990601][ T29] audit: type=1326 audit(330.628:107632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 331.013773][ T29] audit: type=1326 audit(330.628:107633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 331.036887][ T29] audit: type=1326 audit(330.628:107634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 331.040127][T32325] netlink: 'syz.9.12883': attribute type 3 has an invalid length. [ 331.060035][ T29] audit: type=1326 audit(330.628:107635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 331.090977][ T29] audit: type=1326 audit(330.628:107636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32311 comm="syz.4.12876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f8ba460ebe9 code=0x7ffc0000 [ 331.160174][T32337] loop1: detected capacity change from 0 to 1024 [ 331.167272][T32337] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 331.180658][T32339] smc: net device bond0 applied user defined pnetid SYZ0 [ 331.187841][T32339] smc: net device bond0 erased user defined pnetid SYZ0 [ 331.233335][T32337] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.12889: missing EA_INODE flag [ 331.246147][T32337] EXT4-fs (loop1): Remounting filesystem read-only [ 331.283404][T32363] netlink: 'syz.1.12898': attribute type 3 has an invalid length. [ 331.337569][T32371] smc: net device bond0 applied user defined pnetid SYZ0 [ 331.354978][T32371] smc: net device bond0 erased user defined pnetid SYZ0 [ 331.393292][T32383] loop4: detected capacity change from 0 to 1024 [ 331.415184][T32383] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 331.443118][T32383] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.12910: missing EA_INODE flag [ 331.456516][T32383] EXT4-fs (loop4): Remounting filesystem read-only [ 331.491901][T32403] netlink: 'syz.2.12916': attribute type 3 has an invalid length. [ 331.564957][T32418] smc: net device bond0 applied user defined pnetid SYZ0 [ 331.572555][T32418] smc: net device bond0 erased user defined pnetid SYZ0 [ 331.655355][T32437] loop0: detected capacity change from 0 to 1024 [ 331.675469][T32437] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 331.712729][T32437] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.12932: missing EA_INODE flag [ 331.730887][T32437] EXT4-fs (loop0): Remounting filesystem read-only [ 331.740576][T32452] smc: net device bond0 applied user defined pnetid SYZ0 [ 331.747993][T32452] smc: net device bond0 erased user defined pnetid SYZ0 [ 331.756422][T32454] loop2: detected capacity change from 0 to 256 [ 331.768854][T32456] loop9: detected capacity change from 0 to 128 [ 331.775495][T32458] netlink: 'syz.4.12945': attribute type 12 has an invalid length. [ 331.806138][T32463] loop2: detected capacity change from 0 to 1024 [ 331.816481][T32463] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 331.834134][T32466] __nla_validate_parse: 3 callbacks suppressed [ 331.834222][T32466] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12948'. [ 331.877906][T32463] EXT4-fs error (device loop2): ext4_xattr_inode_iget:437: inode #11: comm syz.2.12956: missing EA_INODE flag [ 331.895806][T32463] EXT4-fs (loop2): Remounting filesystem read-only [ 331.923627][T32483] loop0: detected capacity change from 0 to 256 [ 331.931542][T32484] sctp: [Deprecated]: syz.4.12955 (pid 32484) Use of int in max_burst socket option deprecated. [ 331.931542][T32484] Use struct sctp_assoc_value instead [ 331.973878][T32491] loop2: detected capacity change from 0 to 128 [ 331.985876][T32494] smc: net device bond0 applied user defined pnetid SYZ0 [ 331.993909][T32494] smc: net device bond0 erased user defined pnetid SYZ0 [ 331.999067][T32489] netlink: 'syz.1.12959': attribute type 12 has an invalid length. [ 332.055088][T32505] loop4: detected capacity change from 0 to 128 [ 332.081790][T32502] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12965'. [ 332.109316][T32508] loop9: detected capacity change from 0 to 1024 [ 332.123348][T32508] EXT4-fs (loop9): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 332.140650][T32512] loop4: detected capacity change from 0 to 256 [ 332.156710][T32516] sctp: [Deprecated]: syz.2.12972 (pid 32516) Use of int in max_burst socket option deprecated. [ 332.156710][T32516] Use struct sctp_assoc_value instead [ 332.200441][T32523] smc: net device bond0 applied user defined pnetid SYZ0 [ 332.212250][T32519] netlink: 'syz.0.12974': attribute type 12 has an invalid length. [ 332.212480][T32508] EXT4-fs error (device loop9): ext4_xattr_inode_iget:437: inode #11: comm syz.9.12968: missing EA_INODE flag [ 332.241436][T32523] smc: net device bond0 erased user defined pnetid SYZ0 [ 332.255145][T32508] EXT4-fs (loop9): Remounting filesystem read-only [ 332.272723][T32536] loop0: detected capacity change from 0 to 128 [ 332.322595][T32546] sctp: [Deprecated]: syz.1.12986 (pid 32546) Use of int in max_burst socket option deprecated. [ 332.322595][T32546] Use struct sctp_assoc_value instead [ 332.366672][T32554] loop1: detected capacity change from 0 to 256 [ 332.378614][T32552] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12981'. [ 332.404635][T32557] smc: net device bond0 applied user defined pnetid SYZ0 [ 332.414954][T32557] smc: net device bond0 erased user defined pnetid SYZ0 [ 332.425948][T32558] netlink: 'syz.2.12989': attribute type 12 has an invalid length. [ 332.446978][T32564] loop9: detected capacity change from 0 to 512 [ 332.454556][T32564] EXT4-fs: Ignoring removed orlov option [ 332.474019][T32564] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 332.493269][T32569] netdevsim netdevsim0: Direct firmware load for ./file0 failed with error -2 [ 332.504139][T32564] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 332.513230][T32564] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.12994: corrupted in-inode xattr: e_value size too large [ 332.517161][T32577] sctp: [Deprecated]: syz.0.12999 (pid 32577) Use of int in max_burst socket option deprecated. [ 332.517161][T32577] Use struct sctp_assoc_value instead [ 332.527595][T32564] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.12994: couldn't read orphan inode 15 (err -117) [ 332.636985][T32595] loop9: detected capacity change from 0 to 256 [ 332.702524][T32609] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 332.712319][T32589] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13001'. [ 332.741722][T32616] loop2: detected capacity change from 0 to 512 [ 332.748339][T32616] EXT4-fs: Ignoring removed orlov option [ 332.754343][T32616] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 332.767491][T32616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 332.769915][T32618] batadv0: entered promiscuous mode [ 332.777259][T32616] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.13014: corrupted in-inode xattr: e_value size too large [ 332.781478][T32618] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 332.800742][T32616] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.13014: couldn't read orphan inode 15 (err -117) [ 332.814946][T32618] batadv0: left promiscuous mode [ 332.856145][T32628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13020'. [ 332.865331][T32628] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13020'. [ 332.874654][T32628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13020'. [ 332.891814][T32628] netlink: 108 bytes leftover after parsing attributes in process `syz.1.13020'. [ 332.900974][T32628] netlink: 84 bytes leftover after parsing attributes in process `syz.1.13020'. [ 332.997655][T32646] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 333.029833][T32654] loop4: detected capacity change from 0 to 512 [ 333.036262][T32654] EXT4-fs: Ignoring removed orlov option [ 333.042201][T32654] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 333.051270][T32654] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 333.068220][T32654] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.13030: corrupted in-inode xattr: e_value size too large [ 333.085780][T32654] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.13030: couldn't read orphan inode 15 (err -117) [ 333.094791][T32658] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 333.111339][T32660] batadv0: entered promiscuous mode [ 333.117764][T32662] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 333.124311][T32662] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 333.132098][T32662] vhci_hcd vhci_hcd.0: Device attached [ 333.134175][T32660] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 333.145866][T32660] batadv0: left promiscuous mode [ 333.158861][T32663] vhci_hcd: connection closed [ 333.159778][ T41] vhci_hcd: stop threads [ 333.168934][ T41] vhci_hcd: release socket [ 333.173403][ T41] vhci_hcd: disconnect device [ 333.180987][T32666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13033'. [ 333.252548][T32676] batadv0: entered promiscuous mode [ 333.258627][T32676] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 333.266859][T32676] batadv0: left promiscuous mode [ 333.321909][T32690] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 333.331512][T32690] macvtap1: entered allmulticast mode [ 333.337057][T32690] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 333.348300][T32690] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 333.355577][T32690] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 333.375585][T32696] batadv0: entered promiscuous mode [ 333.381817][T32696] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 333.390298][T32696] batadv0: left promiscuous mode [ 333.415968][T32700] loop1: detected capacity change from 0 to 512 [ 333.422577][T32700] EXT4-fs: Ignoring removed orlov option [ 333.428558][T32700] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 333.437591][T32700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 333.445796][T32700] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.13047: corrupted in-inode xattr: e_value size too large [ 333.460177][T32700] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.13047: couldn't read orphan inode 15 (err -117) [ 333.588016][T32729] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 333.602089][T32731] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 333.611408][T32731] macvtap1: entered allmulticast mode [ 333.616828][T32731] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 333.625841][T32731] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 333.632990][T32731] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 333.700957][T32735] loop0: detected capacity change from 0 to 512 [ 333.707428][T32735] EXT4-fs: Ignoring removed orlov option [ 333.714319][T32735] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 333.724891][T32738] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 333.748000][T32735] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 333.774816][T32735] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.13066: corrupted in-inode xattr: e_value size too large [ 333.794534][T32735] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.13066: couldn't read orphan inode 15 (err -117) [ 333.860516][T32761] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 333.867048][T32761] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 333.874622][T32761] vhci_hcd vhci_hcd.0: Device attached [ 333.892285][T32762] vhci_hcd: connection closed [ 333.892545][ T41] vhci_hcd: stop threads [ 333.901582][ T41] vhci_hcd: release socket [ 333.905995][ T41] vhci_hcd: disconnect device [ 333.916548][ T306] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 333.925507][ T306] macvtap1: entered allmulticast mode [ 333.934683][ T306] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 333.945189][ T306] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 333.952379][ T306] netdevsim netdevsim9 netdevsim0: left promiscuous mode [ 333.975673][ T310] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 334.003730][ T317] loop1: detected capacity change from 0 to 512 [ 334.010430][ T317] EXT4-fs: Ignoring removed orlov option [ 334.017297][ T317] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 334.039081][ T317] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 334.048431][ T317] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.13092: corrupted in-inode xattr: e_value size too large [ 334.063997][ T317] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.13092: couldn't read orphan inode 15 (err -117) [ 334.115495][ T336] loop0: detected capacity change from 0 to 512 [ 334.423703][ T349] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 334.462536][ T358] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 334.479371][ T358] macvtap1: entered allmulticast mode [ 334.486780][ T358] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 334.497118][ T363] loop4: detected capacity change from 0 to 512 [ 334.505653][ T358] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 334.512807][ T358] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 334.608324][ T371] loop1: detected capacity change from 0 to 512 [ 334.663461][ T384] loop2: detected capacity change from 0 to 512 [ 334.686690][ T383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 334.693210][ T383] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 334.700883][ T383] vhci_hcd vhci_hcd.0: Device attached [ 334.711663][ T386] vhci_hcd: connection closed [ 334.711832][ T41] vhci_hcd: stop threads [ 334.720791][ T41] vhci_hcd: release socket [ 334.725272][ T41] vhci_hcd: disconnect device [ 334.981435][ T404] loop2: detected capacity change from 0 to 512 [ 334.989408][ T404] EXT4-fs: Ignoring removed orlov option [ 334.995219][ T404] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.002078][ T404] ext4: Unknown parameter 'fsname' [ 335.214768][ T435] loop0: detected capacity change from 0 to 512 [ 335.228059][ T435] EXT4-fs: Ignoring removed orlov option [ 335.233862][ T435] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.240696][ T435] ext4: Unknown parameter 'fsname' [ 335.248728][ T437] binfmt_misc: register: failed to install interpreter file ./file0 [ 335.305994][ T446] loop2: detected capacity change from 0 to 512 [ 335.315415][ T446] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 335.327718][ T448] loop9: detected capacity change from 0 to 512 [ 335.338797][ T448] EXT4-fs: Ignoring removed orlov option [ 335.344702][ T448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.351663][ T446] EXT4-fs (loop2): 1 orphan inode deleted [ 335.357433][ T446] EXT4-fs (loop2): 1 truncate cleaned up [ 335.363854][ T448] ext4: Unknown parameter 'fsname' [ 335.534438][ T481] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 335.534576][ T480] binfmt_misc: register: failed to install interpreter file ./file0 [ 335.540963][ T481] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 335.541119][ T481] vhci_hcd vhci_hcd.0: Device attached [ 335.576450][ T482] vhci_hcd: connection closed [ 335.576628][ T3440] vhci_hcd: stop threads [ 335.585599][ T3440] vhci_hcd: release socket [ 335.590175][ T3440] vhci_hcd: disconnect device [ 335.609885][ T489] loop4: detected capacity change from 0 to 512 [ 335.616641][ T489] EXT4-fs: Ignoring removed orlov option [ 335.622558][ T489] EXT4-fs: Ignoring removed nomblk_io_submit option [ 335.629386][ T489] ext4: Unknown parameter 'fsname' [ 335.665352][ T491] loop0: detected capacity change from 0 to 512 [ 335.673139][ T491] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 335.684581][ T491] EXT4-fs (loop0): 1 orphan inode deleted [ 335.690353][ T491] EXT4-fs (loop0): 1 truncate cleaned up [ 335.845199][ T516] binfmt_misc: register: failed to install interpreter file ./file0 [ 335.957060][ T527] loop4: detected capacity change from 0 to 512 [ 335.963983][ T527] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 335.975562][ T527] EXT4-fs (loop4): 1 orphan inode deleted [ 335.981366][ T527] EXT4-fs (loop4): 1 truncate cleaned up [ 336.118989][ T547] binfmt_misc: register: failed to install interpreter file ./file0 [ 336.262026][ T561] loop1: detected capacity change from 0 to 512 [ 336.268801][ T561] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 336.280991][ T561] EXT4-fs (loop1): 1 orphan inode deleted [ 336.286739][ T561] EXT4-fs (loop1): 1 truncate cleaned up [ 336.442849][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 336.442862][ T29] audit: type=1326 audit(336.164:107718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.476987][ T29] audit: type=1326 audit(336.194:107719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.500011][ T29] audit: type=1326 audit(336.194:107720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.522998][ T29] audit: type=1326 audit(336.194:107721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.546183][ T29] audit: type=1326 audit(336.194:107722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.569213][ T29] audit: type=1326 audit(336.194:107723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.592325][ T29] audit: type=1326 audit(336.194:107724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=600 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f80cc5e14a5 code=0x7ffc0000 [ 336.615418][ T29] audit: type=1326 audit(336.194:107725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.638524][ T29] audit: type=1326 audit(336.194:107726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.661832][ T29] audit: type=1326 audit(336.194:107727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=598 comm="syz.0.13214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 336.968032][ T656] loop4: detected capacity change from 0 to 2048 [ 336.977463][ T656] EXT4-fs: Ignoring removed mblk_io_submit option [ 336.983927][ T656] EXT4-fs: Ignoring removed bh option [ 337.159555][ T692] loop1: detected capacity change from 0 to 2048 [ 337.169289][ T692] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.175729][ T692] EXT4-fs: Ignoring removed bh option [ 337.366234][ T738] loop9: detected capacity change from 0 to 128 [ 337.381780][ T742] loop0: detected capacity change from 0 to 2048 [ 337.398444][ T742] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.404869][ T742] EXT4-fs: Ignoring removed bh option [ 337.472732][ T766] loop2: detected capacity change from 0 to 512 [ 337.526095][ T767] bridge0: port 3(batadv1) entered blocking state [ 337.532675][ T767] bridge0: port 3(batadv1) entered disabled state [ 337.541588][ T769] SELinux: failed to load policy [ 337.556405][ T767] batadv1: entered allmulticast mode [ 337.562483][ T767] batadv1: entered promiscuous mode [ 337.578910][ T780] loop0: detected capacity change from 0 to 512 [ 337.602646][ T785] loop2: detected capacity change from 0 to 128 [ 337.642995][ T792] loop0: detected capacity change from 0 to 128 [ 337.688906][ T798] loop2: detected capacity change from 0 to 2048 [ 337.695425][ T798] EXT4-fs: Ignoring removed mblk_io_submit option [ 337.701889][ T798] EXT4-fs: Ignoring removed bh option [ 337.754044][ T807] SELinux: failed to load policy [ 337.797904][ T818] loop1: detected capacity change from 0 to 512 [ 337.843114][ T831] loop4: detected capacity change from 0 to 128 [ 337.941620][ T843] SELinux: failed to load policy [ 337.982534][ T855] loop9: detected capacity change from 0 to 512 [ 338.008596][ T390] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 338.017849][ T390] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 338.063861][ T873] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 338.070387][ T873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.078019][ T873] vhci_hcd vhci_hcd.0: Device attached [ 338.099433][ T873] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 338.120626][ T873] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 338.127201][ T873] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.134682][ T873] vhci_hcd vhci_hcd.0: Device attached [ 338.142614][ T880] SELinux: failed to load policy [ 338.152422][ T873] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 338.158946][ T873] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.166556][ T873] vhci_hcd vhci_hcd.0: Device attached [ 338.179455][ T886] vhci_hcd: connection closed [ 338.179608][ T884] vhci_hcd: connection closed [ 338.184472][ T874] vhci_hcd: connection closed [ 338.186141][ T3440] vhci_hcd: stop threads [ 338.198206][ T3440] vhci_hcd: release socket [ 338.202659][ T3440] vhci_hcd: disconnect device [ 338.214680][ T3440] vhci_hcd: stop threads [ 338.218951][ T3440] vhci_hcd: release socket [ 338.223409][ T3440] vhci_hcd: disconnect device [ 338.230036][ T3440] vhci_hcd: stop threads [ 338.234292][ T3440] vhci_hcd: release socket [ 338.238794][ T3440] vhci_hcd: disconnect device [ 338.745117][ T921] __nla_validate_parse: 34 callbacks suppressed [ 338.745135][ T921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13366'. [ 338.760508][ T921] netlink: 48 bytes leftover after parsing attributes in process `syz.0.13366'. [ 338.864072][ T938] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 338.870602][ T938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.878246][ T938] vhci_hcd vhci_hcd.0: Device attached [ 338.911320][ T938] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 338.929985][ T938] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 338.936594][ T938] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 338.944098][ T938] vhci_hcd vhci_hcd.0: Device attached [ 338.960043][ T938] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 338.966580][ T938] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 338.974303][ T938] vhci_hcd vhci_hcd.0: Device attached [ 338.983827][ T954] loop4: detected capacity change from 0 to 128 [ 339.003943][ T949] vhci_hcd: connection closed [ 339.004085][ T947] vhci_hcd: connection closed [ 339.009257][ T1719] vhci_hcd: stop threads [ 339.009389][ T939] vhci_hcd: connection closed [ 339.013968][ T1719] vhci_hcd: release socket [ 339.013983][ T1719] vhci_hcd: disconnect device [ 339.042941][ T1719] vhci_hcd: stop threads [ 339.046696][ T954] EXT4-fs warning (device loop4): verify_group_input:137: Cannot add at group 29 (only 1 groups) [ 339.047205][ T1719] vhci_hcd: release socket [ 339.062071][ T1719] vhci_hcd: disconnect device [ 339.069043][ T1719] vhci_hcd: stop threads [ 339.073288][ T1719] vhci_hcd: release socket [ 339.077721][ T1719] vhci_hcd: disconnect device [ 339.090288][ T963] netlink: 48 bytes leftover after parsing attributes in process `syz.9.13383'. [ 339.099372][ T963] netlink: 48 bytes leftover after parsing attributes in process `syz.9.13383'. [ 339.242125][ T989] loop1: detected capacity change from 0 to 128 [ 339.258122][ T989] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 29 (only 1 groups) [ 339.289502][ T996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13398'. [ 339.298634][ T996] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13398'. [ 339.573440][ T1006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13412'. [ 339.582563][ T1006] netlink: 48 bytes leftover after parsing attributes in process `syz.2.13412'. [ 339.671555][ T1019] loop2: detected capacity change from 0 to 128 [ 339.709138][ T1019] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 29 (only 1 groups) [ 339.794052][ T1037] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 339.800638][ T1037] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.808306][ T1037] vhci_hcd vhci_hcd.0: Device attached [ 339.841245][ T1037] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 339.860515][ T1037] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 339.867057][ T1037] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 339.874532][ T1037] vhci_hcd vhci_hcd.0: Device attached [ 339.905665][ T1037] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 339.912183][ T1037] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 339.919787][ T1037] vhci_hcd vhci_hcd.0: Device attached [ 339.957606][ T1049] vhci_hcd: connection closed [ 339.957630][ T1046] vhci_hcd: connection closed [ 339.962377][ T1038] vhci_hcd: connection closed [ 339.976831][ T52] vhci_hcd: stop threads [ 339.985813][ T52] vhci_hcd: release socket [ 339.990264][ T52] vhci_hcd: disconnect device [ 340.003355][ T52] vhci_hcd: stop threads [ 340.007639][ T52] vhci_hcd: release socket [ 340.012090][ T52] vhci_hcd: disconnect device [ 340.035633][ T52] vhci_hcd: stop threads [ 340.039891][ T52] vhci_hcd: release socket [ 340.044423][ T52] vhci_hcd: disconnect device [ 340.056740][ T3401] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 340.080278][ T1056] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13420'. [ 340.084061][ T3401] usb 3-1: enqueue for inactive port 0 [ 340.089401][ T1056] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13420'. [ 340.105164][ T3401] usb 3-1: enqueue for inactive port 0 [ 340.112383][ T3401] usb 3-1: enqueue for inactive port 0 [ 340.144144][ T1058] netlink: 'syz.0.13423': attribute type 10 has an invalid length. [ 340.185744][ T3401] vhci_hcd: vhci_device speed not set [ 340.186750][ T1058] team0: Port device geneve1 added [ 340.218439][ T1064] loop2: detected capacity change from 0 to 2048 [ 340.247858][ T1066] loop0: detected capacity change from 0 to 128 [ 340.276742][ T1066] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 29 (only 1 groups) [ 340.348477][ T1074] netlink: 'syz.2.13439': attribute type 10 has an invalid length. [ 340.382606][ T1074] team0: Port device geneve1 added [ 340.686082][ T1099] loop9: detected capacity change from 0 to 128 [ 340.689592][ T1098] loop1: detected capacity change from 0 to 2048 [ 340.772750][ T1099] EXT4-fs warning (device loop9): verify_group_input:137: Cannot add at group 29 (only 1 groups) [ 340.979755][ T1111] netlink: 'syz.1.13444': attribute type 10 has an invalid length. [ 341.019771][ T1114] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 341.026292][ T1114] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 341.033938][ T1114] vhci_hcd vhci_hcd.0: Device attached [ 341.097986][ T1111] team0: Port device geneve1 added [ 341.149934][ T1120] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 341.196239][ T1121] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(5) [ 341.202759][ T1121] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 341.210189][ T1121] vhci_hcd vhci_hcd.0: Device attached [ 341.285420][ T10] usb 19-1: new high-speed USB device number 2 using vhci_hcd [ 341.298160][ T1114] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(8) [ 341.304674][ T1114] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 341.312344][ T1114] vhci_hcd vhci_hcd.0: Device attached [ 341.390755][ T1115] vhci_hcd: connection reset by peer [ 341.390791][ T1122] vhci_hcd: connection closed [ 341.397705][ T1719] vhci_hcd: stop threads [ 341.404958][ T1132] vhci_hcd: connection closed [ 341.406694][ T1719] vhci_hcd: release socket [ 341.415807][ T1719] vhci_hcd: disconnect device [ 341.447849][ T1719] vhci_hcd: stop threads [ 341.452121][ T1719] vhci_hcd: release socket [ 341.456597][ T1719] vhci_hcd: disconnect device [ 341.471238][ T1719] vhci_hcd: stop threads [ 341.475575][ T1719] vhci_hcd: release socket [ 341.480029][ T1719] vhci_hcd: disconnect device [ 341.499023][ T1144] loop0: detected capacity change from 0 to 2048 [ 341.638673][ T29] kauditd_printk_skb: 190 callbacks suppressed [ 341.638686][ T29] audit: type=1326 audit(341.367:107918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.684763][ T29] audit: type=1326 audit(341.397:107919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.707882][ T29] audit: type=1326 audit(341.397:107920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.731221][ T29] audit: type=1326 audit(341.397:107921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.754354][ T29] audit: type=1326 audit(341.397:107922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.777439][ T29] audit: type=1326 audit(341.397:107923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.800455][ T29] audit: type=1326 audit(341.397:107924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.823585][ T29] audit: type=1326 audit(341.407:107925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.846710][ T29] audit: type=1326 audit(341.407:107926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.869764][ T29] audit: type=1326 audit(341.407:107927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1152 comm="syz.0.13458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80cc5aebe9 code=0x7ffc0000 [ 341.973759][ T1160] netlink: 'syz.4.13463': attribute type 10 has an invalid length. [ 342.011432][ T1160] team0: Port device geneve1 added [ 342.163470][ T1169] netlink: 'syz.4.13468': attribute type 21 has an invalid length. [ 342.272716][ T1181] loop4: detected capacity change from 0 to 2048 [ 342.401090][ T1195] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 342.407613][ T1195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 342.415295][ T1195] vhci_hcd vhci_hcd.0: Device attached [ 342.422725][ T1195] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.444490][ T1195] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 342.450996][ T1195] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 342.458395][ T1195] vhci_hcd vhci_hcd.0: Device attached [ 342.476629][ T1195] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 342.483144][ T1195] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 342.490811][ T1195] vhci_hcd vhci_hcd.0: Device attached [ 342.558122][ T1202] vhci_hcd: connection closed [ 342.558238][ T1196] vhci_hcd: connection closed [ 342.558338][ T1205] vhci_hcd: connection closed [ 342.568234][ T52] vhci_hcd: stop threads [ 342.577176][ T52] vhci_hcd: release socket [ 342.581604][ T52] vhci_hcd: disconnect device [ 342.588542][ T52] vhci_hcd: stop threads [ 342.592792][ T52] vhci_hcd: release socket [ 342.597240][ T52] vhci_hcd: disconnect device [ 342.609668][ T52] vhci_hcd: stop threads [ 342.614004][ T52] vhci_hcd: release socket [ 342.618464][ T52] vhci_hcd: disconnect device [ 342.654263][ T3401] usb 9-1: new high-speed USB device number 2 using vhci_hcd [ 342.663941][ T3401] usb 9-1: enqueue for inactive port 0 [ 342.698364][ T3401] usb 9-1: enqueue for inactive port 0 [ 342.703949][ T3401] usb 9-1: enqueue for inactive port 0 [ 342.760249][ T1214] netlink: 'syz.1.13483': attribute type 21 has an invalid length. [ 342.784291][ T3401] vhci_hcd: vhci_device speed not set [ 342.996552][ T1230] loop1: detected capacity change from 0 to 512 [ 343.140778][ T1244] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 343.147310][ T1244] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.154994][ T1244] vhci_hcd vhci_hcd.0: Device attached [ 343.197327][ T1244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.225764][ T1250] netlink: 'syz.0.13500': attribute type 21 has an invalid length. [ 343.282709][ T1244] vhci_hcd vhci_hcd.0: pdev(9) rhport(2) sockfd(7) [ 343.289235][ T1244] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 343.296691][ T1244] vhci_hcd vhci_hcd.0: Device attached [ 343.309432][ T1266] bond1: entered promiscuous mode [ 343.314513][ T1266] bond1: entered allmulticast mode [ 343.320009][ T1267] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(10) [ 343.320258][ T1266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.326604][ T1267] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.326728][ T1267] vhci_hcd vhci_hcd.0: Device attached [ 343.364846][ T1266] bond1 (unregistering): Released all slaves [ 343.391165][ T1256] vhci_hcd: connection closed [ 343.391660][ T1272] vhci_hcd: connection closed [ 343.392784][ T1245] vhci_hcd: connection closed [ 343.398848][ T390] vhci_hcd: stop threads [ 343.410029][ T390] vhci_hcd: release socket [ 343.414478][ T390] vhci_hcd: disconnect device [ 343.435224][ T390] vhci_hcd: stop threads [ 343.439469][ T390] vhci_hcd: release socket [ 343.444004][ T390] vhci_hcd: disconnect device [ 343.459889][ T390] vhci_hcd: stop threads [ 343.462839][ T1285] loop4: detected capacity change from 0 to 512 [ 343.464167][ T390] vhci_hcd: release socket [ 343.464179][ T390] vhci_hcd: disconnect device [ 343.515600][ T1296] netlink: 'syz.2.13514': attribute type 21 has an invalid length. [ 343.547938][ T1301] loop2: detected capacity change from 0 to 512 [ 343.632658][ T1320] bond1: entered promiscuous mode [ 343.637923][ T1320] bond1: entered allmulticast mode [ 343.667584][ T1320] 8021q: adding VLAN 0 to HW filter on device bond1 [ 343.698318][ T1320] bond1 (unregistering): Released all slaves [ 344.523219][ T1343] loop9: detected capacity change from 0 to 512 [ 344.643654][ T1372] __nla_validate_parse: 14 callbacks suppressed [ 344.643666][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13546'. [ 344.651930][ T1374] loop4: detected capacity change from 0 to 512 [ 344.659111][ T1372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13546'. [ 344.690100][ T1376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13549'. [ 344.703576][ T1374] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.13548: iget: bad extended attribute block 1 [ 344.725232][ T1374] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.13548: couldn't read orphan inode 15 (err -117) [ 344.794952][ T1393] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 344.795149][ T1395] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13559'. [ 344.800815][ T1393] syzkaller1: ignored: set checksum enabled [ 344.816111][ T1395] unsupported nlmsg_type 40 [ 344.821015][ T1391] netlink: 'syz.9.13558': attribute type 21 has an invalid length. [ 344.848280][ T1391] netlink: 132 bytes leftover after parsing attributes in process `syz.9.13558'. [ 344.958564][ T1420] loop0: detected capacity change from 0 to 512 [ 344.997701][ T1420] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.000016][ T1428] netlink: 72 bytes leftover after parsing attributes in process `syz.2.13574'. [ 345.042949][ T1432] loop1: detected capacity change from 0 to 512 [ 345.049818][ T1432] EXT4-fs: Ignoring removed i_version option [ 345.070405][ T1420] EXT4-fs mount: 80 callbacks suppressed [ 345.070417][ T1420] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.123288][ T1432] EXT4-fs (loop1): orphan cleanup on readonly fs [ 345.131179][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.139194][ T1432] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13576: bg 0: block 131: padding at end of block bitmap is not set [ 345.155288][ T1432] EXT4-fs (loop1): Remounting filesystem read-only [ 345.161980][ T1432] EXT4-fs (loop1): 1 truncate cleaned up [ 345.168018][ T1432] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 345.191190][ T1457] netlink: 'syz.2.13585': attribute type 2 has an invalid length. [ 345.199161][ T1457] netlink: 'syz.2.13585': attribute type 1 has an invalid length. [ 345.207049][ T1457] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.13585'. [ 345.242595][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.254720][ T1466] loop9: detected capacity change from 0 to 128 [ 345.263910][ T1466] bio_check_eod: 57526 callbacks suppressed [ 345.263993][ T1466] syz.9.13590: attempt to access beyond end of device [ 345.263993][ T1466] loop9: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 345.273140][ T1469] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.13586'. [ 345.389240][ T1491] openvswitch: netlink: Message has 6 unknown bytes. [ 345.412645][ T1495] loop9: detected capacity change from 0 to 512 [ 345.439955][ T1500] loop2: detected capacity change from 0 to 256 [ 345.448869][ T1500] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 345.574118][ T1533] loop9: detected capacity change from 0 to 128 [ 345.583508][ T1533] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 345.612458][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.619797][T29415] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 345.631040][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.637784][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.644569][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.651403][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.658167][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.664846][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.671523][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.678207][ T1542] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 345.864449][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13629'. [ 345.873509][ T1565] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13629'. [ 345.952787][ T1587] loop2: detected capacity change from 0 to 128 [ 345.959532][ T1587] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 345.971775][ T1587] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 345.991539][ T41] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 346.144392][ T1612] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 346.150979][ T1612] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 346.158745][ T1612] vhci_hcd vhci_hcd.0: Device attached [ 346.164923][ T1613] vhci_hcd: connection closed [ 346.165185][ T390] vhci_hcd: stop threads [ 346.174292][ T390] vhci_hcd: release socket [ 346.178753][ T390] vhci_hcd: disconnect device [ 346.238875][ T1626] bond1: entered promiscuous mode [ 346.243967][ T1626] bond1: entered allmulticast mode [ 346.251922][ T1626] 8021q: adding VLAN 0 to HW filter on device bond1 [ 346.269962][ T1626] bond1 (unregistering): Released all slaves [ 346.316036][ T1637] random: crng reseeded on system resumption [ 346.432507][ T10] vhci_hcd: vhci_device speed not set [ 346.458192][ T1663] loop9: detected capacity change from 0 to 1024 [ 346.474032][ T1663] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 346.522786][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.541000][ T1672] loop9: detected capacity change from 0 to 512 [ 346.547948][ T1672] EXT4-fs: Ignoring removed i_version option [ 346.555328][ T1672] EXT4-fs (loop9): orphan cleanup on readonly fs [ 346.561871][ T1672] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.13678: bg 0: block 131: padding at end of block bitmap is not set [ 346.578581][ T1672] EXT4-fs (loop9): Remounting filesystem read-only [ 346.585263][ T1672] EXT4-fs (loop9): 1 truncate cleaned up [ 346.591399][ T1672] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 346.621563][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.714839][ T1700] netlink: 'syz.9.13691': attribute type 6 has an invalid length. [ 347.076073][ T1734] loop9: detected capacity change from 0 to 512 [ 347.162666][ T1740] loop1: detected capacity change from 0 to 2048 [ 347.187014][ T1740] loop1: p2 p3 p7 [ 347.187058][ T1745] loop0: detected capacity change from 0 to 1024 [ 347.193493][ T29] kauditd_printk_skb: 84 callbacks suppressed [ 347.193505][ T29] audit: type=1400 audit(346.910:108012): avc: denied { map } for pid=1743 comm="syz.2.13710" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 347.226573][ T29] audit: type=1400 audit(346.910:108013): avc: denied { execute } for pid=1743 comm="syz.2.13710" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 347.264350][ T1734] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.289996][ T1745] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.317130][ T29] audit: type=1400 audit(347.040:108014): avc: denied { read write } for pid=1757 comm="syz.1.13715" name="uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 347.324114][ T1745] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 347.340317][ T29] audit: type=1400 audit(347.040:108015): avc: denied { open } for pid=1757 comm="syz.1.13715" path="/dev/uhid" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 347.429704][ T1767] loop2: detected capacity change from 0 to 512 [ 347.442447][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.464542][ T1745] EXT4-fs (loop0): Remounting filesystem read-only [ 347.491748][ T29] audit: type=1400 audit(347.210:108016): avc: denied { ioctl } for pid=1773 comm="syz.4.13733" path="/dev/nvram" dev="devtmpfs" ino=98 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 347.531811][ T29] audit: type=1326 audit(347.250:108017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1775 comm="syz.1.13723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 347.554872][ T29] audit: type=1326 audit(347.250:108018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1775 comm="syz.1.13723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 347.577915][ T29] audit: type=1326 audit(347.250:108019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1775 comm="syz.1.13723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 347.579422][ T1785] loop9: detected capacity change from 0 to 512 [ 347.622448][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.677874][ T1785] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.705496][ T1800] loop4: detected capacity change from 0 to 1024 [ 347.721752][ T29] audit: type=1400 audit(347.440:108020): avc: denied { mount } for pid=1805 comm="syz.2.13735" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 347.743777][ T29] audit: type=1400 audit(347.440:108021): avc: denied { read } for pid=1805 comm="syz.2.13735" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 347.773130][ T1800] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 347.815658][ T1800] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.858840][ T1800] EXT4-fs error (device loop4): ext4_xattr_inode_iget:437: inode #11: comm syz.4.13734: missing EA_INODE flag [ 347.892314][ T1800] EXT4-fs (loop4): Remounting filesystem read-only [ 347.920166][T29415] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.991308][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.225108][ T1837] bond1: entered promiscuous mode [ 348.230224][ T1837] bond1: entered allmulticast mode [ 348.237023][ T1837] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.252163][ T1837] bond1 (unregistering): Released all slaves [ 348.360478][ T1851] loop1: detected capacity change from 0 to 512 [ 348.692595][ T1861] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 348.699124][ T1861] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 348.706709][ T1861] vhci_hcd vhci_hcd.0: Device attached [ 348.728855][ T1872] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 348.746330][ T1861] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(5) [ 348.752843][ T1861] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 348.760432][ T1861] vhci_hcd vhci_hcd.0: Device attached [ 348.777794][ T1876] loop2: detected capacity change from 0 to 1024 [ 348.796527][ T1878] bond2: entered promiscuous mode [ 348.801668][ T1878] bond2: entered allmulticast mode [ 348.807337][ T1878] 8021q: adding VLAN 0 to HW filter on device bond2 [ 348.815399][ T1872] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 348.821993][ T1872] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 348.822949][ T1876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.829742][ T1872] vhci_hcd vhci_hcd.0: Device attached [ 348.852298][ T1878] bond2 (unregistering): Released all slaves [ 348.862896][ T1873] vhci_hcd: connection closed [ 348.862896][ T1880] vhci_hcd: connection closed [ 348.867732][ T1864] vhci_hcd: connection closed [ 348.874653][ T41] vhci_hcd: stop threads [ 348.883605][ T41] vhci_hcd: release socket [ 348.887616][ T1876] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 348.888087][ T41] vhci_hcd: disconnect device [ 348.909451][ T1876] EXT4-fs (loop2): Remounting filesystem read-only [ 348.917258][ T41] vhci_hcd: stop threads [ 348.921562][ T41] vhci_hcd: release socket [ 348.925967][ T41] vhci_hcd: disconnect device [ 348.931709][ T41] vhci_hcd: stop threads [ 348.936022][ T41] vhci_hcd: release socket [ 348.940437][ T41] vhci_hcd: disconnect device [ 348.949626][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.971235][ T3376] usb 3-1: new high-speed USB device number 3 using vhci_hcd [ 348.978875][ T3376] usb 3-1: enqueue for inactive port 0 [ 348.985099][ T3376] usb 3-1: enqueue for inactive port 0 [ 348.992234][ T3376] usb 3-1: enqueue for inactive port 0 [ 349.066166][ T1909] loop0: detected capacity change from 0 to 2048 [ 349.081080][ T3376] vhci_hcd: vhci_device speed not set [ 349.125231][ T1909] loop0: p2 p3 p7 [ 349.405227][ T1917] bond1: entered promiscuous mode [ 349.410293][ T1917] bond1: entered allmulticast mode [ 349.415684][ T1917] 8021q: adding VLAN 0 to HW filter on device bond1 [ 349.421396][ T1922] loop0: detected capacity change from 0 to 1024 [ 349.435852][ T1917] bond1 (unregistering): Released all slaves [ 349.444402][ T1922] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.496042][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.569099][ T1942] loop1: detected capacity change from 0 to 512 [ 349.576625][ T1942] EXT4-fs: Ignoring removed i_version option [ 349.586638][ T1942] EXT4-fs (loop1): orphan cleanup on readonly fs [ 349.594804][ T1942] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.13793: bg 0: block 131: padding at end of block bitmap is not set [ 349.609581][ T1948] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 349.616121][ T1948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.623812][ T1948] vhci_hcd vhci_hcd.0: Device attached [ 349.629295][ T1942] EXT4-fs (loop1): Remounting filesystem read-only [ 349.636241][ T1942] EXT4-fs (loop1): 1 truncate cleaned up [ 349.642232][ T1942] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 349.643083][ T1948] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 349.681177][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.690563][ T1948] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 349.697075][ T1948] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 349.704576][ T1948] vhci_hcd vhci_hcd.0: Device attached [ 349.712230][ T1948] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(9) [ 349.718747][ T1948] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 349.726457][ T1948] vhci_hcd vhci_hcd.0: Device attached [ 349.732747][ T1957] vhci_hcd: connection closed [ 349.732951][ T1953] vhci_hcd: connection closed [ 349.732989][ T1949] vhci_hcd: connection closed [ 349.737657][ T3440] vhci_hcd: stop threads [ 349.737666][ T3440] vhci_hcd: release socket [ 349.737681][ T3440] vhci_hcd: disconnect device [ 349.761823][ T3440] vhci_hcd: stop threads [ 349.766060][ T3440] vhci_hcd: release socket [ 349.770478][ T3440] vhci_hcd: disconnect device [ 349.779952][ T3440] vhci_hcd: stop threads [ 349.784257][ T3440] vhci_hcd: release socket [ 349.788688][ T3440] vhci_hcd: disconnect device [ 349.816698][ T1965] __nla_validate_parse: 8 callbacks suppressed [ 349.816719][ T1965] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13800'. [ 349.831920][ T1965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13800'. [ 349.856275][ T1967] random: crng reseeded on system resumption [ 349.885378][ T1971] bond2: entered promiscuous mode [ 349.890427][ T1971] bond2: entered allmulticast mode [ 349.896334][ T1971] 8021q: adding VLAN 0 to HW filter on device bond2 [ 349.911038][ T1971] bond2 (unregistering): Released all slaves [ 350.041808][ T2004] loop9: detected capacity change from 0 to 128 [ 350.048520][ T2004] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.064720][ T2004] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.093429][ T41] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.207006][ T2028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13829'. [ 350.216076][ T2028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13829'. [ 350.308427][ T2056] loop4: detected capacity change from 0 to 128 [ 350.317996][ T2056] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 350.331561][ T2056] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.384807][ T3440] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 350.474158][ T2078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13853'. [ 350.483157][ T2078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13853'. [ 350.520312][ T2090] loop1: detected capacity change from 0 to 128 [ 350.542392][ T2090] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 350.614743][T26587] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 350.642433][ T2118] loop4: detected capacity change from 0 to 512 [ 350.662750][ T2123] net_ratelimit: 3321 callbacks suppressed [ 350.662765][ T2123] openvswitch: netlink: Message has 6 unknown bytes. [ 350.715886][ T2136] loop1: detected capacity change from 0 to 256 [ 350.758557][ T2136] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 350.867890][ T2170] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.13896'. [ 350.929542][ T2183] loop2: detected capacity change from 0 to 512 [ 350.938343][ T2183] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 350.952415][ T2183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.967365][ T2180] netlink: 'syz.4.13903': attribute type 2 has an invalid length. [ 350.975312][ T2180] netlink: 'syz.4.13903': attribute type 1 has an invalid length. [ 350.983187][ T2180] netlink: 199820 bytes leftover after parsing attributes in process `syz.4.13903'. [ 350.999457][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.028267][ T2196] netlink: 72 bytes leftover after parsing attributes in process `syz.9.13909'. [ 351.041474][ T2201] loop4: detected capacity change from 0 to 512 [ 351.047271][ T2200] netlink: 'syz.2.13918': attribute type 21 has an invalid length. [ 351.047999][ T2201] EXT4-fs: Ignoring removed i_version option [ 351.058142][ T2200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13918'. [ 351.079566][ T2201] EXT4-fs (loop4): orphan cleanup on readonly fs [ 351.109967][ T2201] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13911: bg 0: block 131: padding at end of block bitmap is not set [ 351.153861][ T2201] EXT4-fs (loop4): Remounting filesystem read-only [ 351.161481][ T2201] EXT4-fs (loop4): 1 truncate cleaned up [ 351.168923][ T2201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.251165][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.281385][ T2240] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 351.287227][ T2240] syzkaller1: ignored: set checksum enabled [ 351.383228][ T2259] loop1: detected capacity change from 0 to 512 [ 351.399633][ T2260] netlink: 'syz.0.13937': attribute type 21 has an invalid length. [ 351.411610][ T2259] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.13935: iget: bad extended attribute block 1 [ 351.435925][ T2259] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.13935: couldn't read orphan inode 15 (err -117) [ 351.448641][ T2259] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 351.487564][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.559297][ T2287] syzkaller1: tun_chr_ioctl cmd 1074025672 [ 351.565251][ T2287] syzkaller1: ignored: set checksum enabled [ 351.647228][ T2305] loop2: detected capacity change from 0 to 512 [ 351.658161][ T2305] EXT4-fs: Ignoring removed i_version option [ 351.665859][ T2305] EXT4-fs (loop2): orphan cleanup on readonly fs [ 351.674698][ T2305] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.13955: bg 0: block 131: padding at end of block bitmap is not set [ 351.699361][ T2311] netlink: 'syz.9.13956': attribute type 2 has an invalid length. [ 351.706346][ T2305] EXT4-fs (loop2): Remounting filesystem read-only [ 351.707204][ T2311] netlink: 'syz.9.13956': attribute type 1 has an invalid length. [ 351.714791][ T2305] EXT4-fs (loop2): 1 truncate cleaned up [ 351.728032][ T2305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 351.784995][ T2317] openvswitch: netlink: Message has 6 unknown bytes. [ 351.789466][ T2323] loop4: detected capacity change from 0 to 256 [ 351.799029][ T2323] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 351.825202][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.914688][ T2342] loop4: detected capacity change from 0 to 128 [ 351.926499][ T2342] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 351.967318][T23316] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 352.061321][ T2372] loop1: detected capacity change from 0 to 128 [ 352.068019][ T2372] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 352.094337][ T2372] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.131468][ T41] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 352.232524][ T2397] bond1: entered promiscuous mode [ 352.237681][ T2397] bond1: entered allmulticast mode [ 352.243277][ T2397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.258401][ T2397] bond1 (unregistering): Released all slaves [ 352.414054][ T2412] loop0: detected capacity change from 0 to 512 [ 352.421385][ T2412] EXT4-fs: Ignoring removed i_version option [ 352.428493][ T2412] EXT4-fs (loop0): orphan cleanup on readonly fs [ 352.435892][ T2412] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14015: bg 0: block 131: padding at end of block bitmap is not set [ 352.453978][ T2412] EXT4-fs (loop0): Remounting filesystem read-only [ 352.460795][ T2412] EXT4-fs (loop0): 1 truncate cleaned up [ 352.467110][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 352.467122][ T29] audit: type=1326 audit(352.192:108101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2416 comm="syz.4.14007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ba460ebe9 code=0x0 [ 352.467143][ T2412] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.539721][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 352.834390][ T29] audit: type=1326 audit(352.562:108102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2421 comm="syz.2.14020" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdee043ebe9 code=0x0 [ 352.885920][ T2432] loop0: detected capacity change from 0 to 512 [ 352.893526][ T2432] EXT4-fs: Ignoring removed i_version option [ 352.904623][ T2432] EXT4-fs (loop0): orphan cleanup on readonly fs [ 352.914640][ T2432] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.14011: bg 0: block 131: padding at end of block bitmap is not set [ 352.934757][ T2434] bond1: entered promiscuous mode [ 352.939847][ T2434] bond1: entered allmulticast mode [ 352.946360][ T2434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 352.953191][ T2432] EXT4-fs (loop0): Remounting filesystem read-only [ 352.960993][ T2432] EXT4-fs (loop0): 1 truncate cleaned up [ 352.972739][ T2432] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 352.986397][ T2434] bond1 (unregistering): Released all slaves [ 353.010779][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.035230][ T2439] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 353.041818][ T2439] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 353.049441][ T2439] vhci_hcd vhci_hcd.0: Device attached [ 353.055732][ T2440] vhci_hcd: connection closed [ 353.055811][ T1719] vhci_hcd: stop threads [ 353.064752][ T1719] vhci_hcd: release socket [ 353.069179][ T1719] vhci_hcd: disconnect device [ 353.373223][ T2459] loop4: detected capacity change from 0 to 2048 [ 353.433117][ T2459] loop4: p2 p3 p7 [ 353.460631][ T2465] bond2: entered promiscuous mode [ 353.465680][ T2465] bond2: entered allmulticast mode [ 353.471177][ T2465] 8021q: adding VLAN 0 to HW filter on device bond2 [ 353.481348][ T2470] loop4: detected capacity change from 0 to 512 [ 353.489288][ T2465] bond2 (unregistering): Released all slaves [ 353.495612][ T2470] EXT4-fs: Ignoring removed i_version option [ 353.503989][ T2470] EXT4-fs (loop4): orphan cleanup on readonly fs [ 353.511141][ T2470] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.14027: bg 0: block 131: padding at end of block bitmap is not set [ 353.531616][ T2470] EXT4-fs (loop4): Remounting filesystem read-only [ 353.538372][ T2470] EXT4-fs (loop4): 1 truncate cleaned up [ 353.544628][ T2470] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 353.614080][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 353.704999][ T29] audit: type=1326 audit(353.433:108103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2478 comm="syz.9.14031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f27a1c7ebe9 code=0x0 [ 353.772877][ T29] audit: type=1400 audit(353.503:108104): avc: denied { read } for pid=2487 comm="syz.4.14037" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 353.881417][ T2505] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 353.887943][ T2505] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 353.895560][ T2505] vhci_hcd vhci_hcd.0: Device attached [ 353.895671][ T2504] loop2: detected capacity change from 0 to 2048 [ 353.903301][ T2507] vhci_hcd: connection closed [ 353.907822][ T41] vhci_hcd: stop threads [ 353.916772][ T41] vhci_hcd: release socket [ 353.921298][ T41] vhci_hcd: disconnect device [ 353.933024][ T2504] loop2: p2 p3 p7 [ 353.962967][ T2513] bond1: entered promiscuous mode [ 353.968012][ T2513] bond1: entered allmulticast mode [ 353.973352][ T2513] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.983576][ T2513] bond1 (unregistering): Released all slaves [ 354.668619][ T2551] netlink: 'syz.1.14067': attribute type 10 has an invalid length. [ 354.678742][ T2551] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 354.823233][ T2578] netlink: 'syz.2.14077': attribute type 13 has an invalid length. [ 354.831264][ T2578] netlink: 'syz.2.14077': attribute type 17 has an invalid length. [ 354.882602][ T2578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.946498][ T2593] loop2: detected capacity change from 0 to 512 [ 354.969815][ T2593] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 355.025066][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 355.043058][ T2604] loop2: detected capacity change from 0 to 128 [ 355.067160][ T2607] __nla_validate_parse: 13 callbacks suppressed [ 355.067173][ T2607] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14091'. [ 355.088986][ T2607] bridge0: entered promiscuous mode [ 355.172284][ T2607] bridge0: port 3(macvlan3) entered blocking state [ 355.179086][ T2607] bridge0: port 3(macvlan3) entered disabled state [ 355.190018][ T2607] macvlan3: entered allmulticast mode [ 355.195448][ T2607] bridge0: entered allmulticast mode [ 355.201523][ T2607] macvlan3: left allmulticast mode [ 355.206715][ T2607] bridge0: left allmulticast mode [ 355.213432][ T2607] bridge0: left promiscuous mode [ 355.293347][ T29] audit: type=1326 audit(868.023:108105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2627 comm="syz.1.14100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 355.316517][ T29] audit: type=1326 audit(868.023:108106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2627 comm="syz.1.14100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 355.339582][ T29] audit: type=1326 audit(868.023:108107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2627 comm="syz.1.14100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 355.368909][ T29] audit: type=1326 audit(868.023:108108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2627 comm="syz.1.14100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 355.392030][ T29] audit: type=1326 audit(868.023:108109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2627 comm="syz.1.14100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 355.415236][ T29] audit: type=1326 audit(868.023:108110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2627 comm="syz.1.14100" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f081ca8ebe9 code=0x7ffc0000 [ 355.552362][ T2657] loop9: detected capacity change from 0 to 128 [ 355.603300][ T2669] netlink: 'syz.0.14119': attribute type 13 has an invalid length. [ 355.636342][ T2669] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.729651][ T2684] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 355.781936][ T2689] Falling back ldisc for ttyS3. [ 356.176598][ T2781] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14172'. [ 356.213260][ T2781] bridge0: entered promiscuous mode [ 356.219084][ T2788] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14184'. [ 356.220101][ T2781] bridge0: port 3(macvlan3) entered blocking state [ 356.234627][ T2781] bridge0: port 3(macvlan3) entered disabled state [ 356.241608][ T2781] macvlan3: entered allmulticast mode [ 356.246999][ T2781] bridge0: entered allmulticast mode [ 356.253211][ T2781] macvlan3: left allmulticast mode [ 356.258374][ T2781] bridge0: left allmulticast mode [ 356.263754][ T2781] bridge0: left promiscuous mode [ 356.285992][ T2786] validate_nla: 2 callbacks suppressed [ 356.286028][ T2786] netlink: 'syz.0.14183': attribute type 2 has an invalid length. [ 356.299327][ T2786] netlink: 116 bytes leftover after parsing attributes in process `syz.0.14183'. [ 356.447258][ T2802] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14178'. [ 356.525000][ T2815] Falling back ldisc for ttyS3. [ 356.568509][ T2832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14195'. [ 356.594710][ T2836] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14196'. [ 356.682715][ T2853] netlink: 'syz.0.14204': attribute type 14 has an invalid length. [ 356.738135][ T2863] netlink: 'syz.9.14208': attribute type 2 has an invalid length. [ 356.746136][ T2863] netlink: 116 bytes leftover after parsing attributes in process `syz.9.14208'. [ 356.760723][ T2867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14210'. [ 356.770333][ T2861] support for the xor transformation has been removed. [ 356.811429][ T2872] lo speed is unknown, defaulting to 1000 [ 356.822563][ T2876] hugetlbfs: syz.1.14215 (2876): Using mlock ulimits for SHM_HUGETLB is obsolete [ 356.891561][ T2889] netlink: 'syz.9.14222': attribute type 13 has an invalid length. [ 356.904635][ T2889] gretap0: refused to change device tx_queue_len [ 356.917392][ T2891] loop2: detected capacity change from 0 to 512 [ 356.925919][ T2889] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 356.944538][ T2891] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 356.977815][ T2891] EXT4-fs (loop2): 1 orphan inode deleted [ 356.983548][ T2891] EXT4-fs (loop2): 1 truncate cleaned up [ 357.008205][ T2891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 357.026099][ T2906] netlink: 'syz.9.14228': attribute type 14 has an invalid length. [ 357.078160][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 357.163425][ T2921] loop2: detected capacity change from 0 to 8192 [ 357.280702][ T2958] loop0: detected capacity change from 0 to 512 [ 357.298435][ T2958] EXT4-fs (loop0): too many log groups per flexible block group [ 357.306121][ T2958] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 357.324432][ T2958] EXT4-fs (loop0): mount failed [ 357.327862][ T2950] lo speed is unknown, defaulting to 1000 [ 357.333442][ T2963] SELinux: Context Ü is not valid (left unmapped). [ 357.379754][ T2969] netlink: 'syz.0.14259': attribute type 13 has an invalid length. [ 357.421688][ T2969] erspan0: refused to change device tx_queue_len [ 357.431717][ T2969] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 357.448044][ T2983] netlink: 20 bytes leftover after parsing attributes in process `syz.4.14263'. [ 357.491129][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 357.491143][ T29] audit: type=1400 audit(870.224:108156): avc: denied { connect } for pid=2989 comm="syz.2.14267" lport=170 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 357.541758][ T29] audit: type=1326 audit(870.274:108157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.564854][ T29] audit: type=1326 audit(870.274:108158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.589856][ T29] audit: type=1326 audit(870.324:108159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdee043d550 code=0x7ffc0000 [ 357.612971][ T29] audit: type=1326 audit(870.324:108160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.636120][ T29] audit: type=1326 audit(870.324:108161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.662804][ T29] audit: type=1326 audit(870.324:108162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.685937][ T29] audit: type=1326 audit(870.324:108163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.709197][ T29] audit: type=1326 audit(870.324:108164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2996 comm="syz.2.14278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.799409][ T3006] loop1: detected capacity change from 0 to 8192 [ 357.830786][ T3023] netlink: 'syz.4.14282': attribute type 13 has an invalid length. [ 357.862646][ T29] audit: type=1326 audit(870.594:108165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3033 comm="syz.2.14287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdee043ebe9 code=0x7ffc0000 [ 357.907551][ T3023] erspan0: refused to change device tx_queue_len [ 357.914480][ T3023] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 357.930402][ T3366] lo speed is unknown, defaulting to 1000 [ 358.120395][ T3082] loop2: detected capacity change from 0 to 512 [ 358.137539][ T3082] EXT4-fs (loop2): too many log groups per flexible block group [ 358.145211][ T3082] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 358.158010][ T3082] EXT4-fs (loop2): mount failed [ 358.258006][ T3401] hid_parser_main: 18 callbacks suppressed [ 358.258025][ T3401] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 358.286755][ T3401] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 358.364624][ T3129] loop1: detected capacity change from 0 to 512 [ 358.393399][ T3129] EXT4-fs (loop1): too many log groups per flexible block group [ 358.401163][ T3129] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 358.428701][ T3129] EXT4-fs (loop1): mount failed [ 359.588465][ T3292] SELinux: failed to load policy [ 359.604944][ T3193] syz.2.14358 (3193) used greatest stack depth: 6392 bytes left [ 359.628967][ T3376] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 359.653781][ T3376] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 359.853865][ T3326] bridge0: entered promiscuous mode [ 359.959047][ T3336] SELinux: failed to load policy [ 360.026315][ T3351] bridge0: entered promiscuous mode [ 360.033428][ T3343] loop9: detected capacity change from 0 to 512 [ 360.059051][ T3343] journal_path: Non-blockdev passed as './bus' [ 360.065238][ T3343] EXT4-fs: error: could not find journal device path [ 360.065372][ T3355] loop4: detected capacity change from 0 to 1024 [ 360.113951][ T3361] __nla_validate_parse: 13 callbacks suppressed [ 360.113965][ T3361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14435'. [ 360.121870][ T3355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.169513][ T3372] netlink: 224 bytes leftover after parsing attributes in process `syz.2.14448'. [ 360.184316][ T3355] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 360.244559][ T3384] SELinux: failed to load policy [ 360.275055][T23316] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.297418][ T3393] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14444'. [ 360.307762][ T3393] bridge0: entered promiscuous mode [ 360.372010][ T3408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.14452'. [ 360.490535][ T3426] loop1: detected capacity change from 0 to 1024 [ 360.511230][ T3426] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.560175][ T3437] loop2: detected capacity change from 0 to 1024 [ 360.577793][ T3426] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 360.627047][ T3437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.640188][ T3450] netlink: 224 bytes leftover after parsing attributes in process `syz.0.14470'. [ 360.699698][ T3456] loop4: detected capacity change from 0 to 512 [ 360.706256][ T3456] journal_path: Non-blockdev passed as './bus' [ 360.712414][ T3456] EXT4-fs: error: could not find journal device path [ 360.722521][T26587] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.772231][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 360.892604][ T3481] loop2: detected capacity change from 0 to 1024 [ 360.907529][ T3481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 360.929935][ T3488] loop0: detected capacity change from 0 to 512 [ 360.936760][ T3488] journal_path: Non-blockdev passed as './bus' [ 360.942927][ T3488] EXT4-fs: error: could not find journal device path [ 360.968777][ T3481] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 361.078013][T24303] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.213810][ T3537] loop0: detected capacity change from 0 to 1024 [ 361.241229][ T3543] netlink: 244 bytes leftover after parsing attributes in process `syz.4.14514'. [ 361.254899][ T3537] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 361.336222][ T3537] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 361.414579][T29431] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 361.471840][ T3581] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14531'. [ 361.525768][ T3590] dummy0: entered promiscuous mode [ 361.530950][ T3590] dummy0: entered allmulticast mode [ 362.125084][ T3605] ================================================================== [ 362.133162][ T3605] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 362.140955][ T3605] [ 362.143255][ T3605] write to 0xffffea00041ae898 of 8 bytes by task 3610 on cpu 1: [ 362.150858][ T3605] __filemap_remove_folio+0x1a5/0x2a0 [ 362.156207][ T3605] filemap_remove_folio+0x6d/0x1d0 [ 362.161296][ T3605] truncate_inode_folio+0x42/0x50 [ 362.166295][ T3605] shmem_undo_range+0x244/0xa80 [ 362.171124][ T3605] shmem_fallocate+0x799/0x840 [ 362.175861][ T3605] vfs_fallocate+0x3b3/0x400 [ 362.180427][ T3605] __x64_sys_fallocate+0x7a/0xd0 [ 362.185339][ T3605] x64_sys_call+0x2514/0x2ff0 [ 362.189991][ T3605] do_syscall_64+0xd2/0x200 [ 362.194474][ T3605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.200340][ T3605] [ 362.202643][ T3605] read to 0xffffea00041ae898 of 8 bytes by task 3605 on cpu 0: [ 362.210155][ T3605] folio_mapping+0xa1/0x120 [ 362.214637][ T3605] move_folios_to_lru+0x128/0x6a0 [ 362.219639][ T3605] evict_folios+0x3155/0x3520 [ 362.224293][ T3605] try_to_shrink_lruvec+0x5b5/0x950 [ 362.229467][ T3605] shrink_lruvec+0x22e/0x1b50 [ 362.234118][ T3605] shrink_node+0x686/0x2120 [ 362.238600][ T3605] do_try_to_free_pages+0x3f6/0xcd0 [ 362.243773][ T3605] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 362.249721][ T3605] try_charge_memcg+0x358/0x9e0 [ 362.254548][ T3605] obj_cgroup_charge_pages+0xa6/0x150 [ 362.259899][ T3605] __memcg_kmem_charge_page+0x9f/0x170 [ 362.265332][ T3605] __alloc_frozen_pages_noprof+0x188/0x360 [ 362.271120][ T3605] alloc_pages_mpol+0xb3/0x250 [ 362.275865][ T3605] alloc_pages_noprof+0x90/0x130 [ 362.280779][ T3605] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 362.286562][ T3605] __kvmalloc_node_noprof+0x30f/0x4e0 [ 362.291920][ T3605] ip_set_alloc+0x1f/0x30 [ 362.296230][ T3605] hash_netiface_create+0x282/0x740 [ 362.301403][ T3605] ip_set_create+0x3cc/0x960 [ 362.305962][ T3605] nfnetlink_rcv_msg+0x4c6/0x590 [ 362.310876][ T3605] netlink_rcv_skb+0x120/0x220 [ 362.315613][ T3605] nfnetlink_rcv+0x16b/0x1690 [ 362.320264][ T3605] netlink_unicast+0x5c0/0x690 [ 362.325005][ T3605] netlink_sendmsg+0x58b/0x6b0 [ 362.329743][ T3605] __sock_sendmsg+0x145/0x180 [ 362.334394][ T3605] ____sys_sendmsg+0x31e/0x4e0 [ 362.339130][ T3605] ___sys_sendmsg+0x17b/0x1d0 [ 362.343781][ T3605] __x64_sys_sendmsg+0xd4/0x160 [ 362.348605][ T3605] x64_sys_call+0x191e/0x2ff0 [ 362.353254][ T3605] do_syscall_64+0xd2/0x200 [ 362.357738][ T3605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.363606][ T3605] [ 362.365905][ T3605] value changed: 0xffff88811a217928 -> 0x0000000000000000 [ 362.372979][ T3605] [ 362.375277][ T3605] Reported by Kernel Concurrency Sanitizer on: [ 362.381405][ T3605] CPU: 0 UID: 0 PID: 3605 Comm: syz.1.14542 Tainted: G W 6.16.0-syzkaller-12288-g2b38afce25c4 #0 PREEMPT(voluntary) [ 362.395091][ T3605] Tainted: [W]=WARN [ 362.398870][ T3605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.408895][ T3605] ================================================================== [ 362.914148][ T3605] syz.1.14542 (3605) used greatest stack depth: 5984 bytes left