last executing test programs: 38.586967637s ago: executing program 4 (id=641): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="000202"], 0x18) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x101301) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) 38.357553515s ago: executing program 4 (id=648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000040000cd00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) flistxattr(0xffffffffffffffff, 0x0, 0x0) 38.332623947s ago: executing program 4 (id=649): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 38.244332674s ago: executing program 4 (id=650): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 38.069205439s ago: executing program 4 (id=655): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 37.532277802s ago: executing program 4 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 37.532011972s ago: executing program 32 (id=662): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) unlink(0x0) 36.961102118s ago: executing program 2 (id=675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 36.926191271s ago: executing program 2 (id=676): socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') 36.892764513s ago: executing program 2 (id=677): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) listen(r0, 0x0) r1 = syz_io_uring_setup(0x19d1, &(0x7f00000003c0)={0x0, 0x0, 0x10100, 0x8000000, 0x8000000}, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2185}, 0x1}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) shutdown(r0, 0x1) 36.799144231s ago: executing program 2 (id=679): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x40, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 36.653922163s ago: executing program 2 (id=685): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 36.308385951s ago: executing program 2 (id=691): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x4c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 36.30813771s ago: executing program 33 (id=691): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}}], 0x1, 0x4c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmmsg(r3, &(0x7f0000001140), 0x700, 0x2, 0x0) 1.276711227s ago: executing program 3 (id=1834): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x1000000, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x39, 0x0, 0x5}, {0xfffe}, {0x0, 0x1, 0x0, 0xfffffffc}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0xf0}, 0x0) 1.233306761s ago: executing program 3 (id=1838): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x4, 0x1, 0x78, 0x0, 0xfffffff8}, 0xc) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) 1.007468059s ago: executing program 3 (id=1844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000c3d8000000"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) 975.013202ms ago: executing program 3 (id=1847): unshare(0x2040400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x47) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 910.865757ms ago: executing program 3 (id=1853): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) 783.719547ms ago: executing program 1 (id=1861): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x1, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x5d1a0}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x48800) 747.38592ms ago: executing program 6 (id=1865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r2, r2, 0x0, 0xb) 713.652943ms ago: executing program 1 (id=1867): bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000013000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) fadvise64(r2, 0x1000, 0x6, 0x3) 703.702324ms ago: executing program 6 (id=1868): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 662.905847ms ago: executing program 1 (id=1869): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000d7c900000900000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x0, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 661.890587ms ago: executing program 6 (id=1871): r0 = socket(0x1, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 617.876401ms ago: executing program 1 (id=1872): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) ptrace$getsig(0x4202, 0x0, 0x1, 0x0) 616.983521ms ago: executing program 1 (id=1874): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r1, 0x3518, 0xaddf, 0x2, 0x0, 0x0) 544.107167ms ago: executing program 6 (id=1885): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffff}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 488.099531ms ago: executing program 6 (id=1879): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r1}, 0x10) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r2 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x1b\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x0) fallocate(r2, 0x0, 0x400000000000000, 0x2) 456.874404ms ago: executing program 1 (id=1880): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r2}, 0x18) 429.228676ms ago: executing program 6 (id=1882): socket$inet6_sctp(0xa, 0x801, 0x84) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000340), 0x11000) vmsplice(r2, &(0x7f0000000280)=[{&(0x7f0000000200)="a5", 0x1}], 0x1, 0x0) 364.131371ms ago: executing program 5 (id=1883): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 318.663775ms ago: executing program 0 (id=1886): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x2040400) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) fsmount(r1, 0x0, 0x0) 302.016866ms ago: executing program 5 (id=1887): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2169802, 0x0, 0x0, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x14, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r0}, 0x10) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 299.265876ms ago: executing program 0 (id=1888): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x20241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x3c, 0x2c, 0xd2f, 0x70bd27, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x49200}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) 228.426892ms ago: executing program 5 (id=1889): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000440)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 144.308599ms ago: executing program 0 (id=1890): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r0}, &(0x7f0000000580), &(0x7f00000007c0)='%-5lx \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 132.135009ms ago: executing program 5 (id=1891): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r2, &(0x7f00000001c0), &(0x7f0000000280)=@udp=r3}, 0x20) close(r3) 97.537293ms ago: executing program 0 (id=1892): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) 67.492005ms ago: executing program 5 (id=1894): perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0xc7, 0x2, 0x0, 0x0, 0x0, 0xd, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54b3, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x80, 0x8000001, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xff00000000000000, 0x777fe6a4b23f}, 0x1000000, 0x0, 0x2, 0x9, 0x0, 0x4, 0x5}, 0x20) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_flowlabel\x00') pread64(r1, &(0x7f0000000580)=""/150, 0x8f, 0x4c00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000005c0)=@newtaction={0x18, 0x30, 0x9, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) 67.169675ms ago: executing program 0 (id=1896): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x3, 0x7ffc1ffb}]}) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000001200)={'#! ', './file0'}, 0xb) close(r1) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) 66.825535ms ago: executing program 3 (id=1897): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x5867, 0x10, 0xfffffffc, 0x24d}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x305d, 0x20000000, 0x21, 0x0, 0x0) 357.96µs ago: executing program 5 (id=1898): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x149800, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) open(&(0x7f0000000200)='./file0\x00', 0xa5941, 0x0) 0s ago: executing program 0 (id=1899): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0}, 0x18) r0 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r0, &(0x7f00000004c0)="0600", 0x2) sendfile(r0, r0, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) kernel console output (not intermixed with test programs): ] audit: type=1400 audit(1754669617.539:88): avc: denied { mounton } for pid=3315 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.208924][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.231526][ T29] audit: type=1400 audit(1754669617.539:89): avc: denied { mount } for pid=3315 comm="syz-executor" name="/" dev="gadgetfs" ino=4696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 84.243096][ T3323] veth1_macvtap: entered promiscuous mode [ 84.272618][ T3321] veth1_macvtap: entered promiscuous mode [ 84.283178][ T3315] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 84.292296][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.306479][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.315207][ T3321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.338071][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.345446][ T29] audit: type=1400 audit(1754669617.679:90): avc: denied { read write } for pid=3315 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.378582][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.400388][ T41] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.430849][ T41] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.463714][ T41] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.492424][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.517799][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.526550][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.579270][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.591155][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.613088][ T3503] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 84.620709][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.622890][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.638431][ T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.649314][ T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.652098][ T3503] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 84.678378][ T3503] syz.2.3 (3503) used greatest stack depth: 10640 bytes left [ 84.844018][ T3522] loop4: detected capacity change from 0 to 8192 [ 84.869922][ T3522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.914915][ T3527] openvswitch: netlink: Message has 6 unknown bytes. [ 85.039484][ T3535] syz.1.21 (3535) used greatest stack depth: 9192 bytes left [ 85.187888][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 85.196695][ T3549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 85.205692][ T3549] netlink: 'syz.1.27': attribute type 18 has an invalid length. [ 85.224489][ T174] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.224510][ T3549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 85.224530][ T3549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 85.251022][ T3549] netlink: 'syz.1.27': attribute type 18 has an invalid length. [ 85.259743][ T41] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.268433][ T3551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.28'. [ 85.268812][ T41] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.286760][ T3549] Zero length message leads to an empty skb [ 85.296146][ T41] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.338964][ T3555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.362223][ T3559] loop3: detected capacity change from 0 to 1024 [ 85.401149][ T3559] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.31: Failed to acquire dquot type 0 [ 85.430101][ T3559] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 85.445129][ T3559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.31: corrupted inode contents [ 85.463857][ T3559] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #13: comm syz.3.31: mark_inode_dirty error [ 85.475643][ T3559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.31: corrupted inode contents [ 85.495564][ T3559] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.31: mark_inode_dirty error [ 85.509969][ T3559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.31: corrupted inode contents [ 85.523116][ T3559] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 85.538987][ T3559] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #13: comm syz.3.31: corrupted inode contents [ 85.555083][ T3522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.565606][ T3559] EXT4-fs error (device loop3): ext4_truncate:4666: inode #13: comm syz.3.31: mark_inode_dirty error [ 85.577782][ T3559] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 85.587384][ T3559] EXT4-fs (loop3): 1 truncate cleaned up [ 85.593666][ T3559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.656283][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.672648][ T3577] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.722670][ T3580] loop3: detected capacity change from 0 to 512 [ 85.753578][ T3580] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.770025][ T3580] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.853841][ T3592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.45'. [ 85.879553][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.011691][ T3522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.037354][ T3610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 86.046182][ T3610] netlink: 108 bytes leftover after parsing attributes in process `syz.0.54'. [ 86.060180][ T3610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.54'. [ 86.084322][ T3612] 9pnet: Could not find request transport: 0xffffffffffffffff [ 86.085169][ T3610] netlink: 108 bytes leftover after parsing attributes in process `syz.0.54'. [ 86.165891][ T3617] loop3: detected capacity change from 0 to 2048 [ 86.213046][ T3634] loop1: detected capacity change from 0 to 128 [ 86.232287][ T3617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.248404][ T3634] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.266650][ T3634] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.266866][ T3617] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.316900][ T3522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.370421][ T3315] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.474720][ T3555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.480577][ T3660] ======================================================= [ 86.480577][ T3660] WARNING: The mand mount option has been deprecated and [ 86.480577][ T3660] and is ignored by this kernel. Remove the mand [ 86.480577][ T3660] option from the mount to silence this warning. [ 86.480577][ T3660] ======================================================= [ 86.578601][ T174] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.620516][ T174] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.637047][ T174] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.654339][ T174] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.854638][ T3689] loop1: detected capacity change from 0 to 256 [ 86.899486][ T3692] loop4: detected capacity change from 0 to 512 [ 86.930524][ T3692] EXT4-fs: Ignoring removed mblk_io_submit option [ 86.949389][ T3692] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.956714][ T3692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 86.965294][ T3692] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.001491][ T3703] Illegal XDP return value 4294967274 on prog (id 57) dev syz_tun, expect packet loss! [ 87.023294][ T3692] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.86: Allocating blocks 41-42 which overlap fs metadata [ 87.052186][ T3702] loop1: detected capacity change from 0 to 4096 [ 87.063509][ T3692] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.86: Failed to acquire dquot type 1 [ 87.077414][ T3692] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 87.092973][ T3692] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.86: corrupted inode contents [ 87.108289][ T3692] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #12: comm syz.4.86: mark_inode_dirty error [ 87.108994][ T3702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.139874][ T3692] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.86: corrupted inode contents [ 87.162408][ T3692] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.86: mark_inode_dirty error [ 87.175211][ T3692] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.86: corrupted inode contents [ 87.204577][ T3692] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 87.223029][ T3692] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #12: comm syz.4.86: corrupted inode contents [ 87.236752][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.252399][ T3692] EXT4-fs error (device loop4): ext4_truncate:4666: inode #12: comm syz.4.86: mark_inode_dirty error [ 87.291111][ T3692] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 87.309750][ T3692] EXT4-fs (loop4): 1 truncate cleaned up [ 87.315862][ T3692] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.359050][ T158] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 87.384879][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.417502][ T3726] loop4: detected capacity change from 0 to 512 [ 87.448934][ T3726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 87.475515][ T3726] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.494958][ T3726] ext4 filesystem being mounted at /7/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 87.510251][ T3737] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 87.529333][ T3731] team0: Port device team_slave_0 removed [ 87.536016][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.671712][ T3555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.710621][ T3555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.790785][ T295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.812767][ T295] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.837118][ T3767] syzkaller1: entered promiscuous mode [ 87.842633][ T3767] syzkaller1: entered allmulticast mode [ 87.862433][ T3772] loop1: detected capacity change from 0 to 512 [ 87.869444][ T295] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.888908][ T3772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 87.902088][ T3772] EXT4-fs (loop1): orphan cleanup on readonly fs [ 87.910382][ T3772] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.121: iget: bad i_size value: 360287970189639690 [ 87.928100][ T295] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.936683][ T3772] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.121: Bad quota inode: 15, type: 2 [ 87.975115][ T3772] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 87.998396][ T3772] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 88.008614][ T3772] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 88.042057][ T3780] loop3: detected capacity change from 0 to 2048 [ 88.058559][ T3772] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 88.059261][ T3780] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.081808][ T3772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002] [ 88.091714][ T3780] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.107427][ T3772] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #15: comm syz.1.121: iget: bad i_size value: 360287970189639690 [ 88.128684][ T3791] process 'syz.2.128' launched './file1' with NULL argv: empty string added [ 88.145365][ T3780] EXT4-fs error (device loop3): ext4_free_inode:354: comm syz.3.124: bit already cleared for inode 15 [ 88.146750][ T3772] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.121: Bad quota inode: 15, type: 2 [ 88.168831][ T3772] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 88.191913][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.215351][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.346531][ T3819] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 88.353156][ T3819] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 88.360838][ T3819] vhci_hcd vhci_hcd.0: Device attached [ 88.375377][ T3820] vhci_hcd: connection closed [ 88.383131][ T295] vhci_hcd: stop threads [ 88.392185][ T295] vhci_hcd: release socket [ 88.396645][ T295] vhci_hcd: disconnect device [ 88.420666][ T3827] syzkaller0: entered promiscuous mode [ 88.426272][ T3827] syzkaller0: entered allmulticast mode [ 88.523763][ T3845] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.793882][ T3899] loop3: detected capacity change from 0 to 512 [ 88.802571][ T3899] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.163: bad orphan inode 15 [ 88.814777][ T3899] ext4_test_bit(bit=14, block=18) = 1 [ 88.820269][ T3899] is_bad_inode(inode)=0 [ 88.824466][ T3899] NEXT_ORPHAN(inode)=1023 [ 88.828855][ T3899] max_ino=32 [ 88.832114][ T3899] i_nlink=0 [ 88.835849][ T3899] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.163: corrupted xattr block 19: invalid header [ 88.851259][ T3899] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 88.860861][ T3899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 88.901110][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 88.952632][ T3918] bond1: entered promiscuous mode [ 88.957840][ T3918] bond1: entered allmulticast mode [ 88.963427][ T3918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 88.974115][ T3918] bond1 (unregistering): Released all slaves [ 89.013078][ T3923] syzkaller0: entered promiscuous mode [ 89.018665][ T3923] syzkaller0: entered allmulticast mode [ 89.088819][ T29] kauditd_printk_skb: 374 callbacks suppressed [ 89.088836][ T29] audit: type=1400 audit(89.061:459): avc: denied { mount } for pid=3935 comm="syz.3.168" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.107956][ T3939] loop2: detected capacity change from 0 to 512 [ 89.136485][ T29] audit: type=1400 audit(89.061:460): avc: denied { unmount } for pid=3935 comm="syz.3.168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 89.156762][ T3939] EXT4-fs: Ignoring removed nobh option [ 89.174368][ T3939] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.169: iget: bad i_size value: 38620345925642 [ 89.189347][ T3939] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.169: couldn't read orphan inode 15 (err -117) [ 89.202093][ T3939] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.324893][ T3966] netlink: 'syz.3.173': attribute type 1 has an invalid length. [ 89.336088][ T295] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm kworker/u8:6: bg 0: block 5: invalid block bitmap [ 89.360397][ T295] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 89.373094][ T295] EXT4-fs (loop2): This should not happen!! Data will be lost [ 89.373094][ T295] [ 89.383165][ T295] EXT4-fs (loop2): Total free blocks count 0 [ 89.389198][ T295] EXT4-fs (loop2): Free/Dirty block details [ 89.393967][ T3966] 8021q: adding VLAN 0 to HW filter on device bond2 [ 89.395166][ T295] EXT4-fs (loop2): free_blocks=0 [ 89.395185][ T295] EXT4-fs (loop2): dirty_blocks=8 [ 89.404206][ T3966] bond1: (slave bond2): making interface the new active one [ 89.406718][ T295] EXT4-fs (loop2): Block reservation details [ 89.406734][ T295] EXT4-fs (loop2): i_reserved_data_blocks=8 [ 89.412125][ T3966] bond1: (slave bond2): Enslaving as an active interface with an up link [ 89.459416][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.538457][ T29] audit: type=1400 audit(89.501:461): avc: denied { listen } for pid=3992 comm="syz.1.179" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.596841][ T29] audit: type=1400 audit(89.531:462): avc: denied { connect } for pid=3990 comm="syz.2.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 89.638089][ T29] audit: type=1400 audit(89.611:463): avc: denied { watch watch_reads } for pid=4009 comm="syz.2.183" path="/proc/45/task" dev="proc" ino=5863 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 89.849980][ T29] audit: type=1326 audit(89.791:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 89.872953][ T29] audit: type=1326 audit(89.791:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 89.895858][ T29] audit: type=1326 audit(89.791:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 89.918678][ T29] audit: type=1326 audit(89.791:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 89.941537][ T29] audit: type=1326 audit(89.801:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4037 comm="syz.3.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 90.057969][ T4060] geneve2: entered promiscuous mode [ 90.063444][ T4060] geneve2: entered allmulticast mode [ 90.161364][ T4078] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=4078 comm=syz.3.197 [ 90.173813][ T4078] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=4078 comm=syz.3.197 [ 90.240021][ T4090] loop3: detected capacity change from 0 to 1024 [ 90.253684][ T4090] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.272790][ T4090] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 90.288089][ T4090] EXT4-fs (loop3): mount failed [ 90.420866][ T4125] loop2: detected capacity change from 0 to 512 [ 90.459709][ T4125] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.513345][ T4139] mmap: syz.1.216 (4139) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.558394][ T4125] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.212: bg 0: block 145: padding at end of block bitmap is not set [ 90.561904][ T4146] syz.1.218 uses obsolete (PF_INET,SOCK_PACKET) [ 90.616445][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.747553][ T4162] loop2: detected capacity change from 0 to 2048 [ 90.785333][ T4172] loop1: detected capacity change from 0 to 512 [ 90.793673][ T4162] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.806438][ T4172] EXT4-fs (loop1): orphan cleanup on readonly fs [ 90.815097][ T4172] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.230: bg 0: block 248: padding at end of block bitmap is not set [ 90.831027][ T4172] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.230: Failed to acquire dquot type 1 [ 90.847953][ T4172] EXT4-fs (loop1): 1 truncate cleaned up [ 90.855472][ T4172] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.879368][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.904152][ T3323] block device autoloading is deprecated and will be removed. [ 90.933745][ T4181] IPv6: Can't replace route, no match found [ 90.940196][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.952060][ T4189] __nla_validate_parse: 15 callbacks suppressed [ 90.952077][ T4189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.235'. [ 90.957569][ T4187] netlink: 'syz.0.236': attribute type 1 has an invalid length. [ 90.958439][ T4189] netlink: 'syz.2.235': attribute type 30 has an invalid length. [ 90.989985][ T4187] bond1: entered promiscuous mode [ 90.995972][ T4187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.026625][ T4187] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.034239][ T4187] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 91.044564][ T4187] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 91.058569][ T4187] bond1: (slave ip6gre1): making interface the new active one [ 91.066079][ T4187] ip6gre1: entered promiscuous mode [ 91.073143][ T4187] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 91.082848][ T174] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.093112][ T174] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.102647][ T174] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.121325][ T174] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.269521][ T4217] netlink: 'syz.0.249': attribute type 21 has an invalid length. [ 91.278809][ T4217] netlink: 156 bytes leftover after parsing attributes in process `syz.0.249'. [ 91.446121][ T4236] ALSA: seq fatal error: cannot create timer (-19) [ 91.486477][ T4241] loop0: detected capacity change from 0 to 512 [ 91.495886][ T4241] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.261: corrupted in-inode xattr: invalid ea_ino [ 91.527511][ T4241] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.261: couldn't read orphan inode 15 (err -117) [ 91.547374][ T4241] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.562238][ T4241] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.762547][ T4284] ALSA: seq fatal error: cannot create timer (-19) [ 91.806149][ T4287] loop3: detected capacity change from 0 to 2048 [ 91.926417][ T4303] netlink: 40 bytes leftover after parsing attributes in process `syz.1.288'. [ 91.962102][ T4305] loop2: detected capacity change from 0 to 1024 [ 91.969908][ T4311] loop4: detected capacity change from 0 to 512 [ 91.980339][ T4305] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.985464][ T4317] loop1: detected capacity change from 0 to 512 [ 91.994246][ T4311] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.002177][ T4317] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.024988][ T4317] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 92.036233][ T4305] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 92.052630][ T4305] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.066082][ T4305] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 92.078482][ T4305] EXT4-fs (loop2): This should not happen!! Data will be lost [ 92.078482][ T4305] [ 92.088344][ T4305] EXT4-fs (loop2): Total free blocks count 0 [ 92.094348][ T4305] EXT4-fs (loop2): Free/Dirty block details [ 92.100273][ T4305] EXT4-fs (loop2): free_blocks=20480 [ 92.105584][ T4305] EXT4-fs (loop2): dirty_blocks=16 [ 92.110737][ T4305] EXT4-fs (loop2): Block reservation details [ 92.112478][ T4317] EXT4-fs (loop1): 1 truncate cleaned up [ 92.116883][ T4305] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 92.124712][ T4317] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.141273][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.177082][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.194721][ T4322] netlink: 'syz.4.296': attribute type 1 has an invalid length. [ 92.229035][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.231067][ T4326] loop2: detected capacity change from 0 to 512 [ 92.252729][ T4326] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.423619][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.528349][ T4346] loop1: detected capacity change from 0 to 512 [ 92.537835][ T4346] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.306: corrupted in-inode xattr: invalid ea_ino [ 92.552678][ T4346] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.306: couldn't read orphan inode 15 (err -117) [ 92.575976][ T4346] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.590491][ T4346] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.609945][ T4351] netlink: 8 bytes leftover after parsing attributes in process `syz.2.308'. [ 92.620367][ T4352] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.661952][ T4352] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.704182][ T4359] loop2: detected capacity change from 0 to 8192 [ 92.723222][ T4359] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.733124][ T4359] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.754431][ T4352] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.769662][ T4365] geneve2: entered promiscuous mode [ 92.774945][ T4365] geneve2: entered allmulticast mode [ 92.787212][ T4359] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.797027][ T4359] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.808080][ T4367] loop1: detected capacity change from 0 to 1024 [ 92.818507][ T4367] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.833063][ T4367] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 92.850731][ T4352] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.861437][ T4367] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28 [ 92.873624][ T4367] EXT4-fs (loop1): This should not happen!! Data will be lost [ 92.873624][ T4367] [ 92.883328][ T4367] EXT4-fs (loop1): Total free blocks count 0 [ 92.889354][ T4367] EXT4-fs (loop1): Free/Dirty block details [ 92.895303][ T4367] EXT4-fs (loop1): free_blocks=20480 [ 92.900934][ T4367] EXT4-fs (loop1): dirty_blocks=16 [ 92.906167][ T4367] EXT4-fs (loop1): Block reservation details [ 92.912164][ T4367] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 92.928975][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.940972][ T4359] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 92.950916][ T4359] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.986529][ T4375] 9pnet_fd: Insufficient options for proto=fd [ 93.018209][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.031400][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.042422][ T4359] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 93.052289][ T4359] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.065231][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.073800][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100355][ T295] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.108638][ T295] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.127937][ T12] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.136158][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.151354][ T12] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.159715][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.177856][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.186288][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.202836][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 93.213405][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 93.227581][ T4382] loop4: detected capacity change from 0 to 512 [ 93.235541][ T4382] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.321: corrupted in-inode xattr: invalid ea_ino [ 93.241440][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 93.259084][ T4382] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.321: couldn't read orphan inode 15 (err -117) [ 93.278560][ T4390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'. [ 93.298691][ T4382] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 93.299533][ T4390] vxlan0: entered promiscuous mode [ 93.322147][ T295] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.340267][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 93.358223][ T295] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.368729][ T4382] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.384184][ T295] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.392998][ T295] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.431622][ T4384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.322'. [ 93.711246][ T4431] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 93.719110][ T4431] netlink: 'syz.4.341': attribute type 6 has an invalid length. [ 93.726766][ T4431] netlink: 'syz.4.341': attribute type 3 has an invalid length. [ 93.982455][ T4442] loop4: detected capacity change from 0 to 1024 [ 93.999921][ T4442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.063790][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.101151][ T29] kauditd_printk_skb: 143 callbacks suppressed [ 94.101169][ T29] audit: type=1326 audit(94.071:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.130103][ T29] audit: type=1326 audit(94.071:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.152634][ T29] audit: type=1326 audit(94.071:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.175253][ T29] audit: type=1326 audit(94.071:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.197731][ T29] audit: type=1326 audit(94.071:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4450 comm="syz.4.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.220616][ T29] audit: type=1326 audit(94.131:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.243188][ T29] audit: type=1326 audit(94.131:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.265959][ T29] audit: type=1326 audit(94.131:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.288670][ T29] audit: type=1326 audit(94.131:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.311569][ T29] audit: type=1326 audit(94.131:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4455 comm="syz.4.352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f95302eebe9 code=0x7ffc0000 [ 94.423105][ T4467] loop2: detected capacity change from 0 to 7 [ 94.602044][ T4495] loop1: detected capacity change from 0 to 512 [ 94.616621][ T4495] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.712257][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.729044][ T4505] SELinux: Context system_u:object_r:systemd_logger_exec_t:s0 is not valid (left unmapped). [ 94.778596][ T4515] binfmt_misc: register: failed to install interpreter file ./file2 [ 94.846203][ T4520] loop2: detected capacity change from 0 to 4096 [ 94.879121][ T4520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.893328][ T4520] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.923125][ T4535] loop1: detected capacity change from 0 to 128 [ 94.932535][ T4535] msdos: Unknown parameter '' [ 95.033073][ T4547] loop1: detected capacity change from 0 to 4096 [ 95.043341][ T4547] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.056737][ T4547] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.326362][ T4571] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 95.332942][ T4571] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 95.340555][ T4571] vhci_hcd vhci_hcd.0: Device attached [ 95.343724][ T3323] block device autoloading is deprecated and will be removed. [ 95.355699][ T4573] vhci_hcd: connection closed [ 95.356503][ T12] vhci_hcd: stop threads [ 95.365685][ T12] vhci_hcd: release socket [ 95.370171][ T12] vhci_hcd: disconnect device [ 95.392237][ T4580] loop1: detected capacity change from 0 to 512 [ 95.400457][ T4580] EXT4-fs: Ignoring removed nobh option [ 95.418459][ T4580] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec018, mo2=0002] [ 95.426592][ T4580] System zones: 0-2, 18-18, 34-34 [ 95.432692][ T4580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.453331][ T4580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 95.508305][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.704089][ T4618] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 95.736193][ T4626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4626 comm=syz.0.420 [ 95.749224][ T4626] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=263 sclass=netlink_audit_socket pid=4626 comm=syz.0.420 [ 95.755843][ T4628] loop2: detected capacity change from 0 to 2048 [ 95.783666][ T4628] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.813028][ T4628] Invalid ELF header magic: != ELF [ 95.831378][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.928191][ T4648] netlink: 'syz.0.430': attribute type 4 has an invalid length. [ 95.942918][ T4648] netlink: 'syz.0.430': attribute type 4 has an invalid length. [ 96.032026][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 96.039505][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.046909][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.054355][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.061936][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.069496][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.076910][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.084368][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.091963][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.099589][ T2956] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 96.137108][ T2956] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 96.447280][ T3323] block device autoloading is deprecated and will be removed. [ 96.474017][ T4722] __nla_validate_parse: 11 callbacks suppressed [ 96.474071][ T4722] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 96.518322][ T4728] netlink: 24 bytes leftover after parsing attributes in process `syz.1.467'. [ 96.729930][ T4752] capability: warning: `syz.0.475' uses 32-bit capabilities (legacy support in use) [ 96.965212][ T4780] syz.0.484 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 97.487480][ T4831] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 97.495004][ T4831] vhci_hcd: invalid port number 129 [ 97.500354][ T4831] vhci_hcd: default hub control req: 4003 v0017 i0081 l0 [ 97.667491][ T4855] netlink: 'syz.4.515': attribute type 4 has an invalid length. [ 97.685493][ T4855] netlink: 'syz.4.515': attribute type 4 has an invalid length. [ 97.766507][ T4863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.519'. [ 97.825939][ T4863] team0: Port device team_slave_0 removed [ 97.927759][ T4857] Set syz1 is full, maxelem 65536 reached [ 98.234626][ T4908] Invalid ELF header magic: != ELF [ 98.289228][ T4913] loop4: detected capacity change from 0 to 1024 [ 98.379557][ T4913] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.429315][ T4913] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 18: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 98.497941][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.556664][ T4923] pimreg: entered allmulticast mode [ 98.566559][ T4923] pimreg: left allmulticast mode [ 98.691469][ T4934] sd 0:0:1:0: device reset [ 98.953707][ T4967] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 98.969142][ T4966] loop1: detected capacity change from 0 to 128 [ 99.003040][ T4966] FAT-fs (loop1): Directory bread(block 162) failed [ 99.017222][ T4966] FAT-fs (loop1): Directory bread(block 163) failed [ 99.025529][ T4966] FAT-fs (loop1): Directory bread(block 164) failed [ 99.032332][ T4966] FAT-fs (loop1): Directory bread(block 165) failed [ 99.044397][ T4966] FAT-fs (loop1): Directory bread(block 166) failed [ 99.056608][ T4966] FAT-fs (loop1): Directory bread(block 167) failed [ 99.074386][ T4966] FAT-fs (loop1): Directory bread(block 168) failed [ 99.081692][ T4966] FAT-fs (loop1): Directory bread(block 169) failed [ 99.106975][ T29] kauditd_printk_skb: 249 callbacks suppressed [ 99.106993][ T29] audit: type=1400 audit(99.071:868): avc: denied { read } for pid=4984 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.145132][ T4966] FAT-fs (loop1): Directory bread(block 162) failed [ 99.153039][ T4979] loop3: detected capacity change from 0 to 8192 [ 99.155666][ T4988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.575'. [ 99.162894][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 99.168440][ T4966] FAT-fs (loop1): Directory bread(block 163) failed [ 99.177171][ T4990] netlink: 'syz.2.577': attribute type 15 has an invalid length. [ 99.188349][ T4966] syz.1.564: attempt to access beyond end of device [ 99.188349][ T4966] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 99.206668][ T4966] syz.1.564: attempt to access beyond end of device [ 99.206668][ T4966] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 99.220226][ T29] audit: type=1326 audit(99.201:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4962 comm="syz.1.564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43da92ebe9 code=0x7ffc0000 [ 99.281174][ T4994] vlan2: entered allmulticast mode [ 99.295941][ T4979] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.308655][ T4990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.577'. [ 99.317649][ T4990] netlink: 'syz.2.577': attribute type 15 has an invalid length. [ 99.377669][ T5005] SELinux: Context is not valid (left unmapped). [ 99.414293][ T4979] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.445167][ T29] audit: type=1400 audit(99.411:870): avc: denied { ioctl } for pid=5015 comm="syz.1.595" path="socket:[9679]" dev="sockfs" ino=9679 ioctlcmd=0xb100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 99.499216][ T29] audit: type=1400 audit(99.451:871): avc: denied { cmd } for pid=5019 comm="syz.2.587" path="socket:[10277]" dev="sockfs" ino=10277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 99.530192][ T29] audit: type=1400 audit(99.501:872): avc: denied { append } for pid=5026 comm="syz.0.590" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 99.553408][ T5027] program syz.0.590 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.565981][ T4979] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.656380][ T4979] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.715096][ T295] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.749046][ T295] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.757573][ T295] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.786906][ T295] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.818462][ T29] audit: type=1400 audit(99.791:873): avc: denied { write } for pid=5047 comm="syz.0.599" name="file0" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.840156][ T29] audit: type=1400 audit(99.791:874): avc: denied { open } for pid=5047 comm="syz.0.599" path="/105/file0" dev="tmpfs" ino=561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 99.863493][ T29] audit: type=1400 audit(99.791:875): avc: denied { ioctl } for pid=5047 comm="syz.0.599" path="/105/file0" dev="tmpfs" ino=561 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 100.153409][ T5077] pimreg: entered allmulticast mode [ 100.162860][ T5077] pimreg: left allmulticast mode [ 100.278171][ T29] audit: type=1326 audit(100.251:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3321aaebe9 code=0x7ffc0000 [ 100.300952][ T29] audit: type=1326 audit(100.251:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5085 comm="syz.0.616" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3321aaebe9 code=0x7ffc0000 [ 100.380923][ T5097] ipvlan2: entered promiscuous mode [ 100.387667][ T5097] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.526591][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 100.536008][ T5117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.629'. [ 100.984802][ T5202] loop2: detected capacity change from 0 to 512 [ 100.993336][ T5202] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 101.029930][ T5202] EXT4-fs (loop2): 1 truncate cleaned up [ 101.061245][ T5214] loop4: detected capacity change from 0 to 2048 [ 101.073695][ T5196] loop0: detected capacity change from 0 to 8192 [ 101.077393][ T5202] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.102980][ T5196] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.112864][ T5196] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.128159][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.133778][ T5214] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.169322][ T5196] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.177120][ T5214] loop4: detected capacity change from 2048 to 0 [ 101.179162][ T5196] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.189612][ T5214] syz.4.650: attempt to access beyond end of device [ 101.189612][ T5214] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 101.228060][ T3321] syz-executor: attempt to access beyond end of device [ 101.228060][ T3321] loop4: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 101.247786][ T5196] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.257755][ T5196] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.308916][ T5196] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.318869][ T5196] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.363487][ T5297] loop3: detected capacity change from 0 to 1024 [ 101.381067][ T4246] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.404261][ T5298] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.412587][ T5298] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.427968][ T5297] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 101.440372][ T5293] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.448727][ T5293] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.465495][ T4246] syz.4.262: attempt to access beyond end of device [ 101.465495][ T4246] loop4: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 101.478861][ T4246] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 101.485227][ T5278] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.495344][ T5278] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.509527][ T5278] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.517989][ T5278] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.519322][ T4246] EXT4-fs (loop4): I/O error while writing superblock [ 101.552395][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 101.561713][ T5222] kmmpd-loop4: attempt to access beyond end of device [ 101.561713][ T5222] loop4: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 101.575211][ T5222] Buffer I/O error on dev loop4, logical block 64, lost sync page write [ 101.734046][ T5247] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.890176][ T5247] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.963243][ T5247] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.031441][ T5247] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.126575][ T5247] bridge_slave_1: left allmulticast mode [ 102.132695][ T5247] bridge_slave_1: left promiscuous mode [ 102.138473][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.138842][ T5365] IPv6: Can't replace route, no match found [ 102.152302][ T5247] bridge_slave_0: left allmulticast mode [ 102.158127][ T5247] bridge_slave_0: left promiscuous mode [ 102.163966][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.297886][ T5387] netlink: 'syz.2.673': attribute type 25 has an invalid length. [ 102.349752][ T5247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.364916][ T5247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.385252][ T5247] bond0 (unregistering): Released all slaves [ 102.437957][ T5247] hsr_slave_0: left promiscuous mode [ 102.447325][ T5247] hsr_slave_1: left promiscuous mode [ 102.453014][ T5247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.461065][ T5247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.469948][ T5247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.477475][ T5247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.490611][ T5247] veth1_macvtap: left promiscuous mode [ 102.496189][ T5247] veth0_macvtap: left promiscuous mode [ 102.505082][ T5247] veth1_vlan: left promiscuous mode [ 102.511528][ T5247] veth0_vlan: left promiscuous mode [ 102.531283][ T5411] loop2: detected capacity change from 0 to 2048 [ 102.587057][ T5411] loop2: detected capacity change from 2048 to 0 [ 102.594920][ T5411] syz.2.679: attempt to access beyond end of device [ 102.594920][ T5411] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 102.608723][ T5247] team0 (unregistering): Port device team_slave_1 removed [ 102.643057][ T3318] syz-executor: attempt to access beyond end of device [ 102.643057][ T3318] loop2: rw=12288, sector=64, nr_sectors = 4 limit=0 [ 102.735091][ T4893] syz.2.532: attempt to access beyond end of device [ 102.735091][ T4893] loop2: rw=145409, sector=0, nr_sectors = 4 limit=0 [ 102.748487][ T4893] Buffer I/O error on dev loop2, logical block 0, lost sync page write [ 102.758223][ T4893] EXT4-fs (loop2): I/O error while writing superblock [ 102.766058][ T5414] kmmpd-loop2: attempt to access beyond end of device [ 102.766058][ T5414] loop2: rw=14337, sector=256, nr_sectors = 4 limit=0 [ 102.779550][ T5414] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 102.789305][ T5332] chnl_net:caif_netlink_parms(): no params data found [ 102.819087][ T5431] pimreg: entered allmulticast mode [ 102.832059][ T5431] pimreg: left allmulticast mode [ 102.871949][ T5332] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.879114][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.886315][ T5332] bridge_slave_0: entered allmulticast mode [ 102.892854][ T5332] bridge_slave_0: entered promiscuous mode [ 102.901343][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.908543][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.915864][ T5332] bridge_slave_1: entered allmulticast mode [ 102.923606][ T5332] bridge_slave_1: entered promiscuous mode [ 102.943909][ T5332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.955675][ T5332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.982224][ T5332] team0: Port device team_slave_0 added [ 102.995169][ T5332] team0: Port device team_slave_1 added [ 103.013905][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.020923][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.046943][ T5332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.060443][ T5332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.067443][ T5332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.093381][ T5332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.132862][ T5450] sd 0:0:1:0: device reset [ 103.151258][ T5247] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.161103][ T5247] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.161206][ T5455] loop3: detected capacity change from 0 to 512 [ 103.183446][ T5455] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 103.214033][ T5455] EXT4-fs (loop3): 1 orphan inode deleted [ 103.219942][ T5455] EXT4-fs (loop3): 1 truncate cleaned up [ 103.230083][ T5332] hsr_slave_0: entered promiscuous mode [ 103.236091][ T5332] hsr_slave_1: entered promiscuous mode [ 103.242233][ T5332] debugfs: 'hsr0' already exists in 'hsr' [ 103.248003][ T5332] Cannot create hsr debugfs directory [ 103.254778][ T5247] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.264658][ T5247] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.268521][ T5455] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 103.294835][ T5455] EXT4-fs (loop3): Remounting filesystem read-only [ 103.301483][ T5455] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30) [ 103.350181][ T5247] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.360043][ T5247] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.418629][ T5247] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.428433][ T5247] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.453249][ T5478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.702'. [ 103.534986][ T5442] chnl_net:caif_netlink_parms(): no params data found [ 103.621393][ T5491] block device autoloading is deprecated and will be removed. [ 103.678208][ T5247] bridge_slave_1: left allmulticast mode [ 103.683906][ T5247] bridge_slave_1: left promiscuous mode [ 103.689666][ T5247] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.709572][ T5247] bridge_slave_0: left allmulticast mode [ 103.715557][ T5247] bridge_slave_0: left promiscuous mode [ 103.721332][ T5247] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.748140][ T5503] netlink: 8 bytes leftover after parsing attributes in process `syz.1.711'. [ 103.850288][ T5247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.861542][ T5247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.872672][ T5247] bond0 (unregistering): Released all slaves [ 103.884483][ T5442] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.892287][ T5442] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.900557][ T5442] bridge_slave_0: entered allmulticast mode [ 103.906900][ T5442] bridge_slave_0: entered promiscuous mode [ 103.914639][ T5442] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.921899][ T5442] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.929246][ T5442] bridge_slave_1: entered allmulticast mode [ 103.938902][ T5442] bridge_slave_1: entered promiscuous mode [ 103.939805][ T5513] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 103.962869][ T5332] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 103.973646][ T5247] hsr_slave_0: left promiscuous mode [ 103.983508][ T5247] hsr_slave_1: left promiscuous mode [ 103.990282][ T5247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.997901][ T5247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.012408][ T5247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.020026][ T5247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.040525][ T5247] veth1_macvtap: left promiscuous mode [ 104.043519][ T5522] netlink: 'syz.3.720': attribute type 25 has an invalid length. [ 104.053856][ T5247] veth0_macvtap: left promiscuous mode [ 104.060377][ T5247] veth1_vlan: left promiscuous mode [ 104.065954][ T5247] veth0_vlan: left promiscuous mode [ 104.160740][ T5247] team0 (unregistering): Port device team_slave_1 removed [ 104.170695][ T5247] team0 (unregistering): Port device team_slave_0 removed [ 104.206907][ T5332] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 104.219143][ T5531] pimreg: entered allmulticast mode [ 104.224535][ T5534] pimreg: left allmulticast mode [ 104.233676][ T5442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.243032][ T5332] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 104.253214][ T5332] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 104.268631][ T5442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.296739][ T5442] team0: Port device team_slave_0 added [ 104.308467][ T5442] team0: Port device team_slave_1 added [ 104.330856][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.337996][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.363968][ T5442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.375876][ T5442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.382881][ T5442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.408857][ T5442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.426067][ T5544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.726'. [ 104.460004][ T5442] hsr_slave_0: entered promiscuous mode [ 104.466330][ T5442] hsr_slave_1: entered promiscuous mode [ 104.472268][ T5442] debugfs: 'hsr0' already exists in 'hsr' [ 104.478010][ T5442] Cannot create hsr debugfs directory [ 104.515087][ T5332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.550368][ T5332] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.574731][ T5290] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.581918][ T5290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.608735][ T5290] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.615937][ T5290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.690710][ T5442] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 104.705335][ T5442] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 104.714938][ T5442] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 104.724123][ T5442] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 104.759662][ T5332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.788910][ T5579] bridge0: port 3(batadv1) entered blocking state [ 104.795434][ T5579] bridge0: port 3(batadv1) entered disabled state [ 104.802410][ T5579] batadv1: entered allmulticast mode [ 104.808868][ T5579] batadv1: entered promiscuous mode [ 104.840006][ T5442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.859796][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 104.859874][ T29] audit: type=1400 audit(104.831:923): avc: denied { create } for pid=5583 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.859925][ T5584] ieee802154 phy0 wpan0: encryption failed: -22 [ 104.866020][ T29] audit: type=1400 audit(104.831:924): avc: denied { write } for pid=5583 comm="syz.1.737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 104.902915][ T5442] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.926172][ T5587] netlink: 100 bytes leftover after parsing attributes in process `syz.0.738'. [ 104.950498][ T5305] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.957728][ T5305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.983870][ T5305] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.991046][ T5305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.003113][ T5596] sd 0:0:1:0: device reset [ 105.040536][ T5442] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.050976][ T5442] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.091779][ T29] audit: type=1326 audit(105.061:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.114581][ T29] audit: type=1326 audit(105.061:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.122023][ T5442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.137281][ T29] audit: type=1326 audit(105.061:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.166984][ T29] audit: type=1326 audit(105.061:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.189725][ T29] audit: type=1326 audit(105.061:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.222851][ T29] audit: type=1326 audit(105.171:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.245550][ T29] audit: type=1326 audit(105.171:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.268325][ T29] audit: type=1326 audit(105.171:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 105.292865][ T5305] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 105.302231][ T5305] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 105.314580][ T5332] veth0_vlan: entered promiscuous mode [ 105.326520][ T5332] veth1_vlan: entered promiscuous mode [ 105.396998][ T5332] veth0_macvtap: entered promiscuous mode [ 105.405762][ T5332] veth1_macvtap: entered promiscuous mode [ 105.450616][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.462884][ T5625] tipc: Started in network mode [ 105.467864][ T5625] tipc: Node identity ac14140f, cluster identity 4711 [ 105.493353][ T5625] tipc: New replicast peer: 255.255.255.255 [ 105.499605][ T5625] tipc: Enabled bearer , priority 10 [ 105.508996][ T5332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.522896][ T5442] veth0_vlan: entered promiscuous mode [ 105.536063][ T5305] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.555327][ T5442] veth1_vlan: entered promiscuous mode [ 105.571031][ T5247] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.592072][ T5247] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.602310][ T5247] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.614056][ T5442] veth0_macvtap: entered promiscuous mode [ 105.627844][ T5442] veth1_macvtap: entered promiscuous mode [ 105.639880][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.650271][ T5442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.669467][ T5294] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.691627][ T5294] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.712568][ T5294] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.728476][ T5294] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.417717][ T5705] netlink: 372 bytes leftover after parsing attributes in process `syz.1.778'. [ 106.540097][ T5721] netlink: 'syz.1.787': attribute type 7 has an invalid length. [ 106.548064][ T5721] netlink: 8 bytes leftover after parsing attributes in process `syz.1.787'. [ 106.575488][ T5720] tipc: Started in network mode [ 106.580606][ T5720] tipc: Node identity ac14140f, cluster identity 4711 [ 106.607159][ T5720] tipc: New replicast peer: 255.255.255.255 [ 106.613254][ T5720] tipc: Enabled bearer , priority 10 [ 106.616974][ T3397] tipc: Node number set to 2886997007 [ 106.799897][ T5735] loop5: detected capacity change from 0 to 1764 [ 106.815003][ T3323] block device autoloading is deprecated and will be removed. [ 106.938872][ T5748] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.431654][ T5757] loop6: detected capacity change from 0 to 8192 [ 107.458062][ T5757] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 107.592428][ T5757] capability: warning: `syz.6.803' uses deprecated v2 capabilities in a way that may be insecure [ 107.726974][ T3396] tipc: Node number set to 2886997007 [ 108.181475][ T5815] netlink: 'syz.3.828': attribute type 21 has an invalid length. [ 108.190225][ T5815] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 108.199353][ T5815] netlink: 'syz.3.828': attribute type 1 has an invalid length. [ 108.208976][ T5819] netlink: 'syz.1.830': attribute type 4 has an invalid length. [ 108.259394][ T5823] loop0: detected capacity change from 0 to 512 [ 108.289901][ T5823] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 108.379401][ T5839] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 108.385885][ T5839] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 108.428426][ T5842] sch_fq: defrate 4294967295 ignored. [ 108.505171][ T5851] loop3: detected capacity change from 0 to 1764 [ 109.309450][ T5868] pimreg: entered allmulticast mode [ 109.319138][ T5868] pimreg: left allmulticast mode [ 109.374506][ T5871] netlink: 8 bytes leftover after parsing attributes in process `syz.1.849'. [ 109.454685][ T5881] loop6: detected capacity change from 0 to 1024 [ 109.532714][ T5885] loop1: detected capacity change from 0 to 8192 [ 109.550928][ T5885] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 109.559226][ T5894] loop0: detected capacity change from 0 to 4096 [ 109.607889][ T5901] loop5: detected capacity change from 0 to 512 [ 109.624765][ T5903] sit0: entered promiscuous mode [ 109.624789][ T5901] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 109.639884][ T5903] sit0: entered allmulticast mode [ 109.647514][ T5901] EXT4-fs (loop5): 1 truncate cleaned up [ 109.818775][ T5927] loop5: detected capacity change from 0 to 1024 [ 109.846232][ T5927] RDS: rds_bind could not find a transport for fe88::106, load rds_tcp or rds_rdma? [ 109.883908][ T5935] loop1: detected capacity change from 0 to 512 [ 109.895044][ T5935] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 109.906166][ T5935] EXT4-fs (loop1): 1 truncate cleaned up [ 109.943239][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.951018][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.959563][ T5945] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.967471][ T5945] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.054486][ T5956] loop1: detected capacity change from 0 to 512 [ 110.061852][ T5956] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 110.244889][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 110.244904][ T29] audit: type=1400 audit(110.211:1063): avc: denied { setopt } for pid=5970 comm="syz.3.889" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 110.286912][ T3323] block device autoloading is deprecated and will be removed. [ 110.306450][ T29] audit: type=1400 audit(110.261:1064): avc: denied { read } for pid=5972 comm="syz.3.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 110.355843][ T29] audit: type=1400 audit(110.321:1065): avc: denied { create } for pid=5980 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.377293][ T29] audit: type=1400 audit(110.351:1066): avc: denied { ioctl } for pid=5980 comm="syz.1.895" path="socket:[14398]" dev="sockfs" ino=14398 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 110.510664][ T29] audit: type=1326 audit(110.481:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 110.537058][ T29] audit: type=1326 audit(110.481:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42868cd550 code=0x7ffc0000 [ 110.559908][ T29] audit: type=1326 audit(110.481:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f42868cd550 code=0x7ffc0000 [ 110.582723][ T29] audit: type=1326 audit(110.481:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 110.605473][ T29] audit: type=1326 audit(110.481:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 110.628490][ T29] audit: type=1326 audit(110.481:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5998 comm="syz.3.904" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 110.688352][ T6006] netlink: 468 bytes leftover after parsing attributes in process `syz.5.915'. [ 110.707835][ T6004] sit0: entered promiscuous mode [ 110.712840][ T6004] sit0: entered allmulticast mode [ 110.892389][ T6029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.917'. [ 110.965338][ T3323] block device autoloading is deprecated and will be removed. [ 111.321930][ T6059] netlink: 'syz.6.929': attribute type 1 has an invalid length. [ 111.329639][ T6059] netlink: 198116 bytes leftover after parsing attributes in process `syz.6.929'. [ 112.746004][ T6110] netlink: 468 bytes leftover after parsing attributes in process `syz.0.951'. [ 112.849244][ T6123] gtp0: entered promiscuous mode [ 113.019790][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.1.969'. [ 113.096059][ T6155] bridge0: port 3(batadv1) entered blocking state [ 113.102837][ T6155] bridge0: port 3(batadv1) entered disabled state [ 113.125890][ T6155] batadv1: entered allmulticast mode [ 113.138454][ T6155] batadv1: entered promiscuous mode [ 113.156800][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.164260][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.172014][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.179494][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.494284][ T6198] raw_sendmsg: syz.3.990 forgot to set AF_INET. Fix it! [ 113.597144][ T5290] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 113.606447][ T5290] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 113.757536][ T6234] syzkaller1: entered promiscuous mode [ 113.763299][ T6234] syzkaller1: entered allmulticast mode [ 114.000328][ T6264] loop3: detected capacity change from 0 to 4096 [ 115.299296][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 115.299308][ T6338] SELinux: Context system_u:object_r:usbtty_device_t:s0 is not valid (left unmapped). [ 115.299315][ T29] audit: type=1400 audit(115.271:1205): avc: denied { relabelfrom } for pid=6337 comm="syz.6.1028" name="SCTP" dev="sockfs" ino=14129 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 115.377965][ T29] audit: type=1400 audit(115.271:1206): avc: denied { relabelto } for pid=6337 comm="syz.6.1028" name="SCTP" dev="sockfs" ino=14129 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 trawcon="system_u:object_r:usbtty_device_t:s0" [ 115.405146][ T29] audit: type=1326 audit(115.341:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 115.427997][ T29] audit: type=1326 audit(115.341:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 115.451203][ T29] audit: type=1326 audit(115.341:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6311 comm="syz.5.1016" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 115.475291][ T29] audit: type=1326 audit(115.401:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 115.498147][ T29] audit: type=1326 audit(115.401:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 115.521284][ T29] audit: type=1326 audit(115.401:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 115.544227][ T29] audit: type=1326 audit(115.401:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 115.567171][ T29] audit: type=1326 audit(115.401:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6346 comm="syz.3.1032" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 115.739861][ T6359] IPVS: stopping master sync thread 6360 ... [ 115.745934][ T6360] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 116.002684][ T6392] IPVS: stopping master sync thread 6393 ... [ 116.003396][ T6393] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 116.063950][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 116.073071][ T6399] netlink: 'syz.5.1056': attribute type 29 has an invalid length. [ 116.081097][ T6399] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1056'. [ 116.157258][ T6411] random: crng reseeded on system resumption [ 116.216582][ T6418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1065'. [ 116.407874][ T23] Process accounting resumed [ 116.446563][ T6440] netlink: 204 bytes leftover after parsing attributes in process `syz.5.1077'. [ 116.493305][ T6446] loop3: detected capacity change from 0 to 1024 [ 116.512934][ T6446] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.523899][ T6446] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 116.538783][ T6446] JBD2: no valid journal superblock found [ 116.544746][ T6446] EXT4-fs (loop3): Could not load journal inode [ 116.755124][ T6466] random: crng reseeded on system resumption [ 116.897434][ T3323] block device autoloading is deprecated and will be removed. [ 116.898656][ T6480] IPVS: stopping master sync thread 6481 ... [ 117.596151][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1136'. [ 117.637431][ T6575] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6575 comm=syz.5.1138 [ 118.302767][ T6650] loop5: detected capacity change from 0 to 4096 [ 118.338550][ T6650] EXT4-fs mount: 20 callbacks suppressed [ 118.338630][ T6650] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.364937][ T6658] loop1: detected capacity change from 0 to 128 [ 118.380539][ T6654] loop6: detected capacity change from 0 to 8192 [ 118.388059][ T6660] IPVS: stopping master sync thread 6661 ... [ 118.388242][ T6650] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.394193][ T6661] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 118.410041][ T6658] syz.1.1174: attempt to access beyond end of device [ 118.410041][ T6658] loop1: rw=2049, sector=129, nr_sectors = 1 limit=128 [ 118.427445][ T6658] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 118.436558][ T6658] syz.1.1174: attempt to access beyond end of device [ 118.436558][ T6658] loop1: rw=2049, sector=130, nr_sectors = 1 limit=128 [ 118.441177][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.441177][ T6662] loop1: rw=2049, sector=139, nr_sectors = 1 limit=128 [ 118.449990][ T6658] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 118.463536][ T6662] Buffer I/O error on dev loop1, logical block 139, lost async page write [ 118.481297][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.481297][ T6662] loop1: rw=2049, sector=140, nr_sectors = 1 limit=128 [ 118.494770][ T6662] Buffer I/O error on dev loop1, logical block 140, lost async page write [ 118.505980][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.505980][ T6662] loop1: rw=2049, sector=141, nr_sectors = 1 limit=128 [ 118.519629][ T6662] Buffer I/O error on dev loop1, logical block 141, lost async page write [ 118.545746][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.545746][ T6662] loop1: rw=2049, sector=142, nr_sectors = 1 limit=128 [ 118.559220][ T6662] Buffer I/O error on dev loop1, logical block 142, lost async page write [ 118.568928][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.568928][ T6662] loop1: rw=2049, sector=143, nr_sectors = 1 limit=128 [ 118.582454][ T6662] Buffer I/O error on dev loop1, logical block 143, lost async page write [ 118.601277][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.601277][ T6662] loop1: rw=2049, sector=144, nr_sectors = 1 limit=128 [ 118.614879][ T6662] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 118.623532][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.623532][ T6662] loop1: rw=2049, sector=147, nr_sectors = 1 limit=128 [ 118.637112][ T6662] Buffer I/O error on dev loop1, logical block 147, lost async page write [ 118.646261][ T6662] syz.1.1174: attempt to access beyond end of device [ 118.646261][ T6662] loop1: rw=2049, sector=148, nr_sectors = 1 limit=128 [ 118.659815][ T6662] Buffer I/O error on dev loop1, logical block 148, lost async page write [ 118.851663][ T6690] loop1: detected capacity change from 0 to 512 [ 118.859143][ T6690] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 118.879571][ T6694] loop3: detected capacity change from 0 to 512 [ 118.887829][ T6690] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1190: casefold flag without casefold feature [ 118.896391][ T6699] loop0: detected capacity change from 0 to 764 [ 118.908134][ T6699] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 118.908422][ T6694] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 118.916966][ T6690] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1190: couldn't read orphan inode 15 (err -117) [ 118.942377][ T6690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.991274][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.037054][ T6708] loop6: detected capacity change from 0 to 512 [ 119.054759][ T6713] loop5: detected capacity change from 0 to 256 [ 119.062183][ T6713] msdos: Unknown parameter '0x0000000000000000BJ [ 119.062183][ T6713] #yB͐`H' [ 119.064749][ T6712] loop1: detected capacity change from 0 to 512 [ 119.085059][ T6717] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6717 comm=syz.0.1201 [ 119.103673][ T6708] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.116392][ T6712] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 119.155927][ T6712] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1196: iget: bogus i_mode (5) [ 119.171065][ T6712] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1196: couldn't read orphan inode 15 (err -117) [ 119.187435][ T6723] SELinux: failed to load policy [ 119.192813][ T6712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.229813][ T5442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.267549][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.310454][ T6737] vhci_hcd: invalid port number 96 [ 119.315683][ T6737] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 119.325055][ T6744] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1214'. [ 119.452301][ T6765] loop1: detected capacity change from 0 to 4096 [ 119.462443][ T6765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.475754][ T6765] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.511342][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 119.568558][ T6782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6782 comm=syz.3.1229 [ 119.581598][ T6782] netlink: 'syz.3.1229': attribute type 1 has an invalid length. [ 119.581705][ T6784] pim6reg1: entered promiscuous mode [ 119.594869][ T6784] pim6reg1: entered allmulticast mode [ 119.625074][ T6782] bond3: (slave bridge1): making interface the new active one [ 119.633015][ T6782] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 119.721823][ T6797] loop0: detected capacity change from 0 to 512 [ 119.752683][ T6797] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 119.798487][ T6809] syzkaller1: entered promiscuous mode [ 119.804008][ T6809] syzkaller1: entered allmulticast mode [ 120.114980][ T6840] loop5: detected capacity change from 0 to 1024 [ 120.121634][ T6840] EXT4-fs: Ignoring removed orlov option [ 120.129256][ T6840] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 120.145579][ T6840] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.177059][ T5332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.243972][ T6844] loop1: detected capacity change from 0 to 8192 [ 120.273922][ T6850] loop6: detected capacity change from 0 to 8192 [ 120.363442][ T6862] netlink: 'syz.5.1263': attribute type 1 has an invalid length. [ 120.432797][ T6868] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1266'. [ 120.609120][ T29] kauditd_printk_skb: 330 callbacks suppressed [ 120.609135][ T29] audit: type=1326 audit(524408.454:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.638973][ T29] audit: type=1326 audit(524408.464:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.663796][ T29] audit: type=1326 audit(524408.513:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.686942][ T29] audit: type=1326 audit(524408.513:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.710161][ T29] audit: type=1326 audit(524408.513:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6886 comm="syz.1.1275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43da92ebe9 code=0x0 [ 120.735599][ T29] audit: type=1326 audit(524408.513:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.758777][ T29] audit: type=1326 audit(524408.513:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.782031][ T29] audit: type=1326 audit(524408.513:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.805369][ T29] audit: type=1326 audit(524408.532:1553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f44dd64ebe9 code=0x7ffc0000 [ 120.828460][ T29] audit: type=1326 audit(524408.532:1554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6887 comm="syz.5.1276" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f44dd5eadd9 code=0x7ffc0000 [ 120.914992][ T6901] vhci_hcd: invalid port number 96 [ 120.920343][ T6901] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 121.010617][ T6920] netlink: 'syz.3.1290': attribute type 1 has an invalid length. [ 121.105666][ T6930] loop6: detected capacity change from 0 to 512 [ 121.128467][ T6936] vhci_hcd: invalid port number 96 [ 121.133723][ T6936] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 121.155073][ T6930] EXT4-fs (loop6): too many log groups per flexible block group [ 121.162979][ T6930] EXT4-fs (loop6): failed to initialize mballoc (-12) [ 121.173810][ T6930] EXT4-fs (loop6): mount failed [ 121.266308][ T6962] syzkaller1: entered promiscuous mode [ 121.271815][ T6962] syzkaller1: entered allmulticast mode [ 121.315422][ T6966] vhci_hcd: invalid port number 96 [ 121.320604][ T6966] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 121.469979][ T6993] geneve2: entered promiscuous mode [ 121.542010][ T6995] loop1: detected capacity change from 0 to 1024 [ 121.548939][ T6995] EXT4-fs: Ignoring removed orlov option [ 121.560936][ T6995] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 121.595328][ T6995] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.712764][ T3315] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.285041][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1342'. [ 122.484864][ T7032] chnl_net:caif_netlink_parms(): no params data found [ 122.503503][ T7052] loop3: detected capacity change from 0 to 512 [ 122.538638][ T7052] EXT4-fs (loop3): too many log groups per flexible block group [ 122.546581][ T7052] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 122.553569][ T7052] EXT4-fs (loop3): mount failed [ 122.568497][ T7032] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.575741][ T7032] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.583092][ T7032] bridge_slave_0: entered allmulticast mode [ 122.590797][ T7032] bridge_slave_0: entered promiscuous mode [ 122.598126][ T7032] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.605319][ T7032] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.612673][ T7032] bridge_slave_1: entered allmulticast mode [ 122.619321][ T7032] bridge_slave_1: entered promiscuous mode [ 122.709670][ T7032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.738595][ T7067] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 122.738595][ T7067] program syz.6.1349 not setting count and/or reply_len properly [ 122.757369][ T7032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.785271][ T7032] team0: Port device team_slave_0 added [ 122.804986][ T7032] team0: Port device team_slave_1 added [ 122.844482][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.851569][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.877546][ T7032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.914614][ T7032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.921629][ T7032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.947953][ T7032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.068496][ T7032] hsr_slave_0: entered promiscuous mode [ 123.084353][ T7032] hsr_slave_1: entered promiscuous mode [ 123.095286][ T7032] debugfs: 'hsr0' already exists in 'hsr' [ 123.101052][ T7032] Cannot create hsr debugfs directory [ 123.238598][ T7032] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.328925][ T7032] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.368312][ T7032] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.436251][ T7032] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.516925][ T7032] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 123.525536][ T7032] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 123.534974][ T7032] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 123.544150][ T7032] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 123.577594][ T7032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.589282][ T7032] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.598474][ T5249] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.605667][ T5249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.619907][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.627023][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.681014][ T7032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.767713][ T7032] veth0_vlan: entered promiscuous mode [ 123.775607][ T7032] veth1_vlan: entered promiscuous mode [ 123.790612][ T7032] veth0_macvtap: entered promiscuous mode [ 123.797898][ T7032] veth1_macvtap: entered promiscuous mode [ 123.808453][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.819080][ T7032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.829390][ T5268] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.838369][ T5268] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.847279][ T5268] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.857455][ T5268] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.089551][ T7178] loop6: detected capacity change from 0 to 4096 [ 124.108369][ T7178] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.124311][ T7178] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.145746][ T7187] vlan2: entered allmulticast mode [ 124.369030][ T7219] loop0: detected capacity change from 0 to 512 [ 124.386551][ T7219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.399223][ T7219] ext4 filesystem being mounted at /234/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.431723][ T3323] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.469060][ T7232] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1406'. [ 124.525512][ T7237] loop0: detected capacity change from 0 to 8192 [ 124.655822][ T5267] bridge_slave_1: left allmulticast mode [ 124.661606][ T5267] bridge_slave_1: left promiscuous mode [ 124.667325][ T5267] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.675557][ T5267] bridge_slave_0: left allmulticast mode [ 124.681298][ T5267] bridge_slave_0: left promiscuous mode [ 124.687037][ T5267] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.797884][ T7245] loop6: detected capacity change from 0 to 1024 [ 124.806853][ T5267] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.832657][ T5267] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.835395][ T5267] bond0 (unregistering): Released all slaves [ 124.856602][ T7245] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 124.895614][ T5267] tipc: Disabling bearer [ 124.900905][ T5267] tipc: Left network mode [ 124.912780][ T7245] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.1411: Allocating blocks 497-513 which overlap fs metadata [ 124.938477][ T5267] hsr_slave_0: left promiscuous mode [ 124.948069][ T5267] hsr_slave_1: left promiscuous mode [ 124.949122][ T7257] sg_read: process 537 (syz.0.1416) changed security contexts after opening file descriptor, this is not allowed. [ 124.965778][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.973219][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.981942][ T5267] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.989367][ T5267] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.997569][ T5442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.017336][ T5267] veth1_macvtap: left promiscuous mode [ 125.022852][ T5267] veth0_macvtap: left promiscuous mode [ 125.165261][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1426'. [ 125.174340][ T7277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1426'. [ 125.186598][ T5267] team0 (unregistering): Port device team_slave_1 removed [ 125.202974][ T5267] team0 (unregistering): Port device team_slave_0 removed [ 125.211400][ T7273] loop3: detected capacity change from 0 to 8192 [ 125.218782][ T7273] msdos: Unknown parameter '' [ 125.336670][ T7294] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1432'. [ 125.347349][ T7294] netlink: 7 bytes leftover after parsing attributes in process `syz.6.1432'. [ 125.373600][ T7300] vlan2: entered allmulticast mode [ 125.386882][ T7302] bridge0: port 3(batadv0) entered blocking state [ 125.393616][ T7302] bridge0: port 3(batadv0) entered disabled state [ 125.400246][ T7302] batadv0: entered allmulticast mode [ 125.406004][ T7302] batadv0: entered promiscuous mode [ 125.604918][ T2956] hid_parser_main: 31 callbacks suppressed [ 125.604939][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 125.618293][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.625709][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.633119][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.641259][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.648710][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.656151][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.663565][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.671051][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.678551][ T2956] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 125.691672][ T2956] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 125.723267][ T29] kauditd_printk_skb: 96 callbacks suppressed [ 125.723281][ T29] audit: type=1326 audit(2000000004.759:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.752841][ T29] audit: type=1326 audit(2000000004.759:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.779370][ T29] audit: type=1326 audit(2000000004.829:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.803036][ T29] audit: type=1326 audit(2000000004.829:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.826643][ T29] audit: type=1326 audit(2000000004.829:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.850108][ T29] audit: type=1326 audit(2000000004.829:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.873564][ T29] audit: type=1326 audit(2000000004.829:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.897746][ T5249] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 125.907105][ T5249] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 125.922449][ T29] audit: type=1326 audit(2000000004.969:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.954666][ T29] audit: type=1326 audit(2000000004.969:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 125.978095][ T29] audit: type=1326 audit(2000000004.969:1660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7319 comm="syz.6.1443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 126.068295][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 126.092833][ T7328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1445'. [ 126.101846][ T5267] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.133130][ T5267] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.148226][ T5267] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.170326][ T5267] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.199728][ T7337] 9p: Unknown access argument : -22 [ 126.215431][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 126.224496][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1452'. [ 126.725749][ T7371] vlan0: entered allmulticast mode [ 126.960009][ T7380] loop0: detected capacity change from 0 to 512 [ 126.989942][ T7380] journal_path: Non-blockdev passed as './bus' [ 126.996567][ T7380] EXT4-fs: error: could not find journal device path [ 127.316138][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1474'. [ 127.325248][ T7392] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1474'. [ 127.368617][ T7392] geneve2: entered promiscuous mode [ 127.373885][ T7392] geneve2: entered allmulticast mode [ 127.520631][ T7407] loop3: detected capacity change from 0 to 512 [ 127.594405][ T7407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.624384][ T7407] ext4 filesystem being mounted at /314/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.697930][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1491'. [ 127.740819][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.761149][ T5249] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.770550][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1491'. [ 127.779688][ T5249] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.805593][ T5249] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.829313][ T5249] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 128.279359][ T7462] loop3: detected capacity change from 0 to 1024 [ 128.334352][ T7462] EXT4-fs: Ignoring removed oldalloc option [ 128.340928][ T7462] EXT4-fs (loop3): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 128.376706][ T7462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.676376][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.152472][ T7495] loop6: detected capacity change from 0 to 1024 [ 129.180379][ T7495] EXT4-fs: inline encryption not supported [ 129.196790][ T7495] EXT4-fs: Ignoring removed bh option [ 129.241619][ T7495] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.485779][ T5442] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.542890][ T7520] atomic_op ffff88811cf53928 conn xmit_atomic 0000000000000000 [ 129.626392][ T7530] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.654029][ T7526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1535'. [ 129.968779][ T7578] loop5: detected capacity change from 0 to 1024 [ 129.976267][ T7578] EXT4-fs: Ignoring removed oldalloc option [ 129.982977][ T7578] EXT4-fs (loop5): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 130.009030][ T7578] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.123681][ T7032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.155137][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1558'. [ 130.264456][ T7594] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1562'. [ 130.434084][ T7614] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1572'. [ 130.443105][ T7614] netlink: 'syz.5.1572': attribute type 7 has an invalid length. [ 130.451058][ T7614] netlink: 'syz.5.1572': attribute type 8 has an invalid length. [ 130.459030][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1572'. [ 130.533737][ T7619] loop3: detected capacity change from 0 to 512 [ 130.550361][ T7619] vfat: Unknown parameter '?Q' [ 130.766349][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 130.766363][ T29] audit: type=1326 audit(2000000009.809:1763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 130.797443][ T29] audit: type=1326 audit(2000000009.809:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 130.821152][ T29] audit: type=1326 audit(2000000009.809:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 130.844829][ T29] audit: type=1326 audit(2000000009.809:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 130.859762][ T7634] netlink: 16 bytes leftover after parsing attributes in process `wޣ'. [ 130.868467][ T29] audit: type=1326 audit(2000000009.849:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7629 comm="syz.6.1578" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 130.881880][ T7634] bridge0: entered promiscuous mode [ 130.909110][ T7634] bridge0: port 4(macvlan2) entered blocking state [ 130.915756][ T7634] bridge0: port 4(macvlan2) entered disabled state [ 130.923390][ T7634] macvlan2: entered allmulticast mode [ 130.928910][ T7634] bridge0: entered allmulticast mode [ 130.936320][ T7634] macvlan2: left allmulticast mode [ 130.941534][ T7634] bridge0: left allmulticast mode [ 130.947666][ T7634] bridge0: left promiscuous mode [ 131.059770][ T29] audit: type=1326 audit(2000000010.099:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 131.084937][ T29] audit: type=1326 audit(2000000010.099:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 131.108562][ T29] audit: type=1326 audit(2000000010.099:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 131.132112][ T29] audit: type=1326 audit(2000000010.099:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 131.132147][ T29] audit: type=1326 audit(2000000010.099:1772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7651 comm="syz.6.1588" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8291febe9 code=0x7ffc0000 [ 131.137612][ T7655] netlink: 'syz.6.1589': attribute type 27 has an invalid length. [ 131.201445][ T7655] sit0: left promiscuous mode [ 131.206282][ T7655] sit0: left allmulticast mode [ 131.232550][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.239755][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.317044][ T7655] gtp0: left promiscuous mode [ 131.355843][ T7656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.363550][ T7656] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.372450][ T7656] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.389068][ T5290] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.398044][ T5290] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.449010][ T5290] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.458205][ T5290] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.470897][ T5290] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.479937][ T5290] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.494368][ T5290] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.503472][ T5290] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.815063][ T7730] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 131.893036][ T7738] loop1: detected capacity change from 0 to 512 [ 131.913940][ T7738] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 131.935148][ T7738] EXT4-fs (loop1): 1 truncate cleaned up [ 131.950236][ T7738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.977534][ T7738] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.179920][ T7774] bridge0: entered promiscuous mode [ 132.185704][ T7774] macvtap1: entered allmulticast mode [ 132.191111][ T7774] bridge0: entered allmulticast mode [ 132.198444][ T7774] bridge0: port 4(macvtap1) entered blocking state [ 132.205039][ T7774] bridge0: port 4(macvtap1) entered disabled state [ 132.225179][ T7774] bridge0: left allmulticast mode [ 132.230275][ T7774] bridge0: left promiscuous mode [ 132.559690][ T7820] bridge0: entered promiscuous mode [ 132.575111][ T7820] macvtap1: entered allmulticast mode [ 132.580609][ T7820] bridge0: entered allmulticast mode [ 132.616241][ T7820] bridge0: port 3(macvtap1) entered blocking state [ 132.622843][ T7820] bridge0: port 3(macvtap1) entered disabled state [ 132.666605][ T7820] bridge0: left allmulticast mode [ 132.671687][ T7820] bridge0: left promiscuous mode [ 132.860410][ T7829] __nla_validate_parse: 2 callbacks suppressed [ 132.860428][ T7829] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1662'. [ 133.037773][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1672'. [ 133.536412][ T7883] all: renamed from bridge_slave_0 (while UP) [ 133.598713][ T7887] bond_slave_1: entered promiscuous mode [ 133.634688][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1688'. [ 133.684014][ T7887] bond0: (slave bond_slave_1): Releasing backup interface [ 133.721972][ T7887] bond_slave_1 (unregistering): left promiscuous mode [ 134.186763][ T7919] all: renamed from bridge_slave_0 (while UP) [ 134.387652][ T7939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1705'. [ 134.474125][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1707'. [ 134.517946][ T7950] bond_slave_1: entered promiscuous mode [ 134.562514][ T7950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'. [ 134.593447][ T7950] bond0: (slave bond_slave_1): Releasing backup interface [ 134.611663][ T7950] bond_slave_1 (unregistering): left promiscuous mode [ 134.680186][ T7955] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 134.994360][ T7976] serio: Serial port ptm0 [ 135.155655][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 135.172397][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 135.191747][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 135.217783][ T8010] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1729'. [ 135.995686][ T8068] netlink: 'syz.6.1752': attribute type 6 has an invalid length. [ 136.047803][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 136.047819][ T29] audit: type=1326 audit(2000000015.089:1903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.112152][ T8075] loop3: detected capacity change from 0 to 256 [ 136.122366][ T29] audit: type=1326 audit(2000000015.129:1904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.146034][ T29] audit: type=1326 audit(2000000015.129:1905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.169495][ T29] audit: type=1326 audit(2000000015.129:1906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.192975][ T29] audit: type=1326 audit(2000000015.129:1907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.198630][ T8075] FAT-fs (loop3): Directory bread(block 64) failed [ 136.216498][ T29] audit: type=1326 audit(2000000015.129:1908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.246497][ T29] audit: type=1326 audit(2000000015.129:1909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.250657][ T8075] FAT-fs (loop3): Directory bread(block 65) failed [ 136.269926][ T29] audit: type=1326 audit(2000000015.129:1910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.299916][ T29] audit: type=1326 audit(2000000015.129:1911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.323498][ T29] audit: type=1326 audit(2000000015.129:1912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8071 comm="syz.3.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f42868cebe9 code=0x7ffc0000 [ 136.330440][ T8075] FAT-fs (loop3): Directory bread(block 66) failed [ 136.365237][ T8075] FAT-fs (loop3): Directory bread(block 67) failed [ 136.371919][ T8075] FAT-fs (loop3): Directory bread(block 68) failed [ 136.378588][ T8075] FAT-fs (loop3): Directory bread(block 69) failed [ 136.385352][ T8075] FAT-fs (loop3): Directory bread(block 70) failed [ 136.392045][ T8075] FAT-fs (loop3): Directory bread(block 71) failed [ 136.400675][ T8075] FAT-fs (loop3): Directory bread(block 72) failed [ 136.407496][ T8075] FAT-fs (loop3): Directory bread(block 73) failed [ 136.612573][ T8095] netlink: 'syz.3.1761': attribute type 3 has an invalid length. [ 136.620388][ T8095] netlink: 'syz.3.1761': attribute type 1 has an invalid length. [ 137.079460][ C0] hrtimer: interrupt took 35908 ns [ 137.193326][ T8153] ref_ctr_offset mismatch. inode: 0x472 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 137.261207][ T8082] 9pnet_fd: p9_fd_create_tcp (8082): problem connecting socket to 127.0.0.1 [ 137.302890][ T8162] loop6: detected capacity change from 0 to 128 [ 137.311908][ T8162] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.324328][ T8162] ext4 filesystem being mounted at /218/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 137.355892][ T5442] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.428379][ T8173] bond_slave_1: entered promiscuous mode [ 137.439729][ T8173] bond0: (slave bond_slave_1): Releasing backup interface [ 137.448354][ T8173] bond_slave_1 (unregistering): left promiscuous mode [ 137.745572][ T8204] netlink: 'syz.6.1808': attribute type 1 has an invalid length. [ 137.763298][ T8204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 137.816940][ T8210] netlink: 'syz.6.1811': attribute type 3 has an invalid length. [ 138.093414][ T8263] loop5: detected capacity change from 0 to 512 [ 138.097892][ T8266] pim6reg: entered allmulticast mode [ 138.105304][ T8248] loop0: detected capacity change from 0 to 8192 [ 138.122221][ T8263] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.1837: iget: bad i_size value: 38620345925642 [ 138.135859][ T8266] pim6reg: left allmulticast mode [ 138.145959][ T8263] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1837: couldn't read orphan inode 15 (err -117) [ 138.161536][ T8263] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.177126][ T8263] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1837: bg 0: block 5: invalid block bitmap [ 138.193534][ T8263] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 64 with error 28 [ 138.206061][ T8263] EXT4-fs (loop5): This should not happen!! Data will be lost [ 138.206061][ T8263] [ 138.215724][ T8263] EXT4-fs (loop5): Total free blocks count 0 [ 138.221746][ T8263] EXT4-fs (loop5): Free/Dirty block details [ 138.227711][ T8263] EXT4-fs (loop5): free_blocks=0 [ 138.232662][ T8263] EXT4-fs (loop5): dirty_blocks=64 [ 138.237794][ T8263] EXT4-fs (loop5): Block reservation details [ 138.243804][ T8263] EXT4-fs (loop5): i_reserved_data_blocks=64 [ 138.267373][ T7032] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.356064][ T8292] netlink: 'syz.6.1850': attribute type 39 has an invalid length. [ 138.436776][ T8305] __nla_validate_parse: 8 callbacks suppressed [ 138.436795][ T8305] netlink: 152 bytes leftover after parsing attributes in process `syz.5.1857'. [ 138.539691][ T8321] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 138.540492][ T8319] ref_ctr_offset mismatch. inode: 0x6ba offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 138.569147][ T8321] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.613348][ T8332] netlink: 'syz.6.1868': attribute type 10 has an invalid length. [ 138.625559][ T8332] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 138.669514][ T8337] loop0: detected capacity change from 0 to 128 [ 138.701879][ T8337] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 138.726952][ T8337] ext4 filesystem being mounted at /331/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 138.782859][ T3323] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.803460][ T8354] netlink: 'syz.5.1878': attribute type 1 has an invalid length. [ 138.820706][ T8354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.916841][ T8369] ref_ctr_offset mismatch. inode: 0x258 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 138.955344][ T8371] netem: incorrect ge model size [ 138.960352][ T8371] netem: change failed [ 139.422848][ T8394] ================================================================== [ 139.430975][ T8394] BUG: KCSAN: data-race in rtc_dev_poll / rtc_pie_update_irq [ 139.438376][ T8394] [ 139.440713][ T8394] read-write to 0xffff88810330b388 of 8 bytes by interrupt on cpu 0: [ 139.448789][ T8394] rtc_pie_update_irq+0x93/0xf0 [ 139.453658][ T8394] __hrtimer_run_queues+0x20c/0x5a0 [ 139.458873][ T8394] hrtimer_interrupt+0x21a/0x460 [ 139.463832][ T8394] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 139.469752][ T8394] sysvec_apic_timer_interrupt+0x6f/0x80 [ 139.475404][ T8394] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 139.481394][ T8394] __tsan_read4+0xe9/0x190 [ 139.485837][ T8394] ____sys_recvmsg+0x176/0x280 [ 139.490631][ T8394] ___sys_recvmsg+0x11f/0x370 [ 139.495315][ T8394] do_recvmmsg+0x1ef/0x540 [ 139.499741][ T8394] __x64_sys_recvmmsg+0xe5/0x170 [ 139.504699][ T8394] x64_sys_call+0x27a6/0x2ff0 [ 139.509396][ T8394] do_syscall_64+0xd2/0x200 [ 139.513923][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.519834][ T8394] [ 139.522170][ T8394] read to 0xffff88810330b388 of 8 bytes by task 8394 on cpu 1: [ 139.529720][ T8394] rtc_dev_poll+0x78/0xb0 [ 139.534060][ T8394] __io_arm_poll_handler+0x1eb/0xb70 [ 139.539390][ T8394] io_arm_apoll+0x3d2/0x4f0 [ 139.543915][ T8394] io_arm_poll_handler+0x131/0x160 [ 139.550948][ T8394] io_queue_async+0x25b/0x450 [ 139.557372][ T8394] io_req_task_submit+0xc0/0xd0 [ 139.562243][ T8394] io_handle_tw_list+0x190/0x1c0 [ 139.567209][ T8394] tctx_task_work_run+0x6d/0x1a0 [ 139.572170][ T8394] tctx_task_work+0x3f/0x80 [ 139.576782][ T8394] task_work_run+0x131/0x1a0 [ 139.581393][ T8394] get_signal+0xe13/0xf70 [ 139.585750][ T8394] arch_do_signal_or_restart+0x96/0x480 [ 139.591317][ T8394] exit_to_user_mode_loop+0x7a/0x100 [ 139.596618][ T8394] do_syscall_64+0x1d6/0x200 [ 139.601225][ T8394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.607141][ T8394] [ 139.609474][ T8394] value changed: 0x000000000000afc0 -> 0x000000000000b0c0 [ 139.616590][ T8394] [ 139.618921][ T8394] Reported by Kernel Concurrency Sanitizer on: [ 139.625080][ T8394] CPU: 1 UID: 0 PID: 8394 Comm: syz.3.1897 Not tainted 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 139.637163][ T8394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.647317][ T8394] ==================================================================