last executing test programs: 40.134369823s ago: executing program 2 (id=946): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x400000, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 40.121104643s ago: executing program 2 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r2, @ANYBLOB="059900f3ffffff111800128008000100677470000c000280050005"], 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xfff3}}}, 0x24}}, 0x20000000) 38.606270005s ago: executing program 2 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x0, 0x22}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mknodat$null(r0, &(0x7f00000000c0)='./file0\x00', 0x2, 0x103) 38.554701036s ago: executing program 2 (id=981): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') 38.536491376s ago: executing program 2 (id=984): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r1 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 38.434757747s ago: executing program 2 (id=986): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x6c, 0x3}) 38.431973258s ago: executing program 32 (id=986): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x6c, 0x3}) 1.978531251s ago: executing program 5 (id=2200): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x21, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c50f000000000000000011000000"], 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 1.870274613s ago: executing program 5 (id=2203): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.835751823s ago: executing program 5 (id=2206): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000980), 0x0, 0x2f, 0xe8034000, 0x0, 0x0, 0x0, 0x0, 0x5dc}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f2, &(0x7f0000000080)) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.532872618s ago: executing program 5 (id=2213): socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='mm_page_alloc\x00'}, 0x18) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) 1.286462771s ago: executing program 0 (id=2216): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.132309893s ago: executing program 0 (id=2228): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000300)=0x2) ioctl$PPPIOCSACTIVE(r1, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r1, 0x0, 0x0) 1.036512575s ago: executing program 4 (id=2220): r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xa0}}) io_uring_enter(r2, 0x2def, 0x0, 0xe, 0x0, 0x0) 465.644803ms ago: executing program 4 (id=2229): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000000)={r3, 0x7ff}, 0x8) 445.310013ms ago: executing program 3 (id=2230): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000300)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x5}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 439.952003ms ago: executing program 4 (id=2231): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r3, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) 423.628584ms ago: executing program 3 (id=2232): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="8fedcb791f6f9875f37538e486dd6317ce81ea0388"], 0xfdef) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xffbf) 423.067274ms ago: executing program 4 (id=2233): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) sysinfo(&(0x7f00000003c0)=""/240) 306.548425ms ago: executing program 4 (id=2234): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000000c0)={[{@data_err_ignore}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) connect$netlink(r0, &(0x7f0000000040)=@unspec, 0xc) 305.868635ms ago: executing program 1 (id=2244): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000280)=0x2, 0x4) 255.053516ms ago: executing program 3 (id=2235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 254.515576ms ago: executing program 1 (id=2246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x24, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x1, 0xffff}, {0xa, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x4000) 204.714557ms ago: executing program 3 (id=2236): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000040)={'nat\x00', 0x0, [0x4, 0x6, 0x203, 0x40, 0x4]}, &(0x7f0000000000)=0x54) 196.819377ms ago: executing program 0 (id=2237): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r0}, 0x3d) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r1}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) 189.448557ms ago: executing program 1 (id=2238): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x0, r2, 0x80000000}, 0x10) 94.097289ms ago: executing program 1 (id=2239): r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) preadv(r0, &(0x7f0000000780)=[{&(0x7f0000000300)=""/152, 0x98}], 0x1, 0x8001, 0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000001640)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000200000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a32000000000900010073797a300000000068000000060a010400000000000000000100000008000b40000000000900010073797a3000000000400004801c000180090001006c617374000000000c0002800800014000000006200001800e00010069"], 0xdc}}, 0x0) 86.631458ms ago: executing program 0 (id=2240): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = getpgid(0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0xac63094eb3328933, 0x0) pidfd_getfd(r2, r3, 0x0) 48.008219ms ago: executing program 0 (id=2241): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = io_uring_setup(0x56ad, &(0x7f0000000780)={0x0, 0x826e, 0x10000, 0xffffffff, 0x20002}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000640)=[{0x0}], 0x1) syz_clone3(&(0x7f0000000000)={0x285002400, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x46) io_uring_register$IORING_REGISTER_FILES(r1, 0x1e, &(0x7f0000000000)=[r1], 0x1) 0s ago: executing program 0 (id=2242): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) close(r0) kernel console output (not intermixed with test programs): 4149] [ 44.639007][ T4149] EXT4-fs (loop1): Total free blocks count 0 [ 44.645021][ T4149] EXT4-fs (loop1): Free/Dirty block details [ 44.651014][ T4149] EXT4-fs (loop1): free_blocks=128 [ 44.656160][ T4149] EXT4-fs (loop1): dirty_blocks=0 [ 44.661460][ T4149] EXT4-fs (loop1): Block reservation details [ 44.667988][ T4149] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 44.724194][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.778304][ T4163] netlink: 'syz.1.268': attribute type 1 has an invalid length. [ 44.792307][ T4164] loop3: detected capacity change from 0 to 164 [ 44.806825][ T4164] syz.3.267: attempt to access beyond end of device [ 44.806825][ T4164] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 44.823358][ T4164] syz.3.267: attempt to access beyond end of device [ 44.823358][ T4164] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 44.865322][ T4170] netlink: 256 bytes leftover after parsing attributes in process `syz.3.271'. [ 44.894279][ T4173] netlink: 96 bytes leftover after parsing attributes in process `syz.2.269'. [ 44.919815][ T4175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.272'. [ 44.932391][ T4177] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 44.961737][ T4181] 9pnet: p9_errstr2errno: server reported unknown error @pA [ 45.018978][ T4185] SELinux: syz.3.277 (4185) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 45.277084][ T4208] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 45.277084][ T4208] The task syz.1.283 (4208) triggered the difference, watch for misbehavior. [ 45.362707][ T4143] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.411819][ T4143] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.462499][ T4143] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.491542][ T4222] loop2: detected capacity change from 0 to 1024 [ 45.510429][ T4222] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.522622][ T4222] ext4 filesystem being mounted at /58/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.538112][ T4222] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 45.554869][ T4222] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 45.557902][ T3416] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 45.567448][ T4222] EXT4-fs (loop2): This should not happen!! Data will be lost [ 45.567448][ T4222] [ 45.567470][ T4222] EXT4-fs (loop2): Total free blocks count 0 [ 45.575389][ T3416] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz0] on syz1 [ 45.584580][ T4222] EXT4-fs (loop2): Free/Dirty block details [ 45.584598][ T4222] EXT4-fs (loop2): free_blocks=4293918720 [ 45.584611][ T4222] EXT4-fs (loop2): dirty_blocks=64 [ 45.584622][ T4222] EXT4-fs (loop2): Block reservation details [ 45.584660][ T4222] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 45.637495][ T4143] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.643842][ T4222] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28 [ 45.651431][ T4143] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.671035][ T4143] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.683266][ T4143] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.710584][ T4232] loop2: detected capacity change from 0 to 164 [ 45.717713][ T4232] rock: directory entry would overflow storage [ 45.723998][ T4232] rock: sig=0x4543, size=28, remaining=18 [ 46.270321][ T4256] netlink: 156 bytes leftover after parsing attributes in process `syz.0.305'. [ 46.270345][ T4256] netlink: 24 bytes leftover after parsing attributes in process `syz.0.305'. [ 46.348461][ T4260] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 46.443977][ T4266] SELinux: failed to load policy [ 46.512791][ T4272] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 46.764921][ T29] kauditd_printk_skb: 152 callbacks suppressed [ 46.764936][ T29] audit: type=1400 audit(1749245280.444:511): avc: denied { read } for pid=4292 comm="syz.2.323" name="mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.765040][ T29] audit: type=1400 audit(1749245280.444:512): avc: denied { open } for pid=4292 comm="syz.2.323" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 46.771787][ T29] audit: type=1400 audit(1749245280.454:513): avc: denied { ioctl } for pid=4292 comm="syz.2.323" path="/dev/mISDNtimer" dev="devtmpfs" ino=249 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 47.011096][ T29] audit: type=1400 audit(1749245280.694:514): avc: denied { execute } for pid=4311 comm="syz.3.332" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=7028 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 47.104703][ T29] audit: type=1400 audit(1749245280.784:515): avc: denied { mount } for pid=4314 comm="syz.4.334" name="/" dev="ramfs" ino=7224 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 47.183267][ T4325] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.369055][ T29] audit: type=1326 audit(1749245281.044:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 47.392443][ T29] audit: type=1326 audit(1749245281.044:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 47.415859][ T29] audit: type=1326 audit(1749245281.044:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 47.439207][ T29] audit: type=1326 audit(1749245281.044:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 47.462574][ T29] audit: type=1326 audit(1749245281.044:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4336 comm="syz.4.343" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 47.630852][ T4348] loop2: detected capacity change from 0 to 512 [ 47.666100][ T4348] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.685622][ T4350] loop3: detected capacity change from 0 to 1024 [ 47.695200][ T4348] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.710974][ T4348] EXT4-fs error (device loop2): ext4_xattr_block_get:593: inode #15: comm syz.2.348: corrupted xattr block 32: bad e_name length [ 47.726472][ T4350] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.729225][ T4348] EXT4-fs (loop2): Remounting filesystem read-only [ 47.745159][ T4348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.776662][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.787401][ T4348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.798060][ T4348] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 47.830906][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.932699][ T4376] loop2: detected capacity change from 0 to 2048 [ 48.218013][ T4387] __nla_validate_parse: 5 callbacks suppressed [ 48.218033][ T4387] netlink: 256 bytes leftover after parsing attributes in process `syz.2.362'. [ 48.313059][ T4393] vhci_hcd: invalid port number 96 [ 48.318493][ T4393] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 48.358589][ T4395] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.435789][ T4395] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.492748][ T4395] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.551967][ T4395] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.616346][ T4395] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.628219][ T4395] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.668557][ T4395] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.685007][ T4395] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.909944][ T4422] xt_CT: You must specify a L4 protocol and not use inversions on it [ 48.961035][ T4426] netlink: 24 bytes leftover after parsing attributes in process `syz.1.381'. [ 48.972247][ T4424] netlink: 76 bytes leftover after parsing attributes in process `syz.2.379'. [ 49.050304][ T4432] netlink: 16 bytes leftover after parsing attributes in process `syz.1.383'. [ 49.258346][ T4444] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.390806][ T4495] loop1: detected capacity change from 0 to 128 [ 49.401621][ T4495] vfat: Unknown parameter '0xffffffffffffffff' [ 49.444655][ T4507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.396'. [ 49.453557][ T4507] netlink: 4 bytes leftover after parsing attributes in process `syz.0.396'. [ 49.480545][ T4507] wireguard0: entered promiscuous mode [ 49.627401][ T4523] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 49.678751][ T4529] netlink: 80 bytes leftover after parsing attributes in process `syz.4.405'. [ 49.761267][ T4542] netlink: 16 bytes leftover after parsing attributes in process `syz.3.410'. [ 49.871471][ T4554] : renamed from vlan1 (while UP) [ 50.084702][ T4575] netlink: 68 bytes leftover after parsing attributes in process `syz.3.426'. [ 50.351008][ T4610] loop1: detected capacity change from 0 to 512 [ 50.360901][ T4610] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.404938][ T4610] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.449043][ T4610] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.442: corrupted xattr block 32: bad e_name length [ 50.486809][ T4610] EXT4-fs (loop1): Remounting filesystem read-only [ 50.493419][ T4610] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 50.522006][ T4621] loop4: detected capacity change from 0 to 1024 [ 50.551662][ T4610] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 50.575112][ T4621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.609214][ T4610] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 50.671968][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.692302][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.947838][ T4649] xt_hashlimit: size too large, truncated to 1048576 [ 50.972542][ T4651] netlink: 'syz.2.460': attribute type 13 has an invalid length. [ 51.172114][ T4655] netlink: 256 bytes leftover after parsing attributes in process `syz.1.462'. [ 51.346467][ T4666] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.457320][ T4666] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.515670][ T4666] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.555212][ T4682] loop2: detected capacity change from 0 to 764 [ 51.570447][ T4666] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.587100][ T4682] Symlink component flag not implemented [ 51.595965][ T4682] Symlink component flag not implemented (7) [ 51.638541][ T4666] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.682812][ T4666] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.727316][ T4666] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.755474][ T4666] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.852168][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 51.852262][ T29] audit: type=1326 audit(1749245285.534:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 51.894604][ T29] audit: type=1326 audit(1749245285.534:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 51.917959][ T29] audit: type=1326 audit(1749245285.564:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 51.941329][ T29] audit: type=1326 audit(1749245285.564:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 51.964780][ T29] audit: type=1326 audit(1749245285.564:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=225 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 51.988069][ T29] audit: type=1326 audit(1749245285.564:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 52.011638][ T29] audit: type=1326 audit(1749245285.564:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4708 comm="syz.1.480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 52.051510][ T4720] loop2: detected capacity change from 0 to 512 [ 52.130780][ T4720] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.483: bg 0: block 5: invalid block bitmap [ 52.169729][ T4720] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 52.195063][ T4720] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.483: invalid indirect mapped block 3 (level 2) [ 52.229977][ T4720] EXT4-fs (loop2): 2 truncates cleaned up [ 52.236178][ T4720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.241130][ T29] audit: type=1400 audit(1749245285.914:692): avc: denied { connect } for pid=4750 comm="syz.1.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.268366][ T29] audit: type=1400 audit(1749245285.914:693): avc: denied { ioctl } for pid=4750 comm="syz.1.491" path="socket:[7798]" dev="sockfs" ino=7798 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 52.310676][ T29] audit: type=1400 audit(1749245285.984:694): avc: denied { link } for pid=4715 comm="syz.2.483" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 52.343880][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.564669][ T4770] loop0: detected capacity change from 0 to 164 [ 52.582209][ T4770] syz.0.499: attempt to access beyond end of device [ 52.582209][ T4770] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 52.597028][ T4770] syz.0.499: attempt to access beyond end of device [ 52.597028][ T4770] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 52.666389][ T4776] smc: net device bond0 applied user defined pnetid SYZ0 [ 52.677084][ T4776] smc: net device bond0 erased user defined pnetid SYZ0 [ 52.694782][ T4778] loop3: detected capacity change from 0 to 512 [ 52.718780][ T4778] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 52.731971][ T4778] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.749492][ T4784] loop0: detected capacity change from 0 to 512 [ 52.749778][ T4778] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 52.785428][ T4784] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.788110][ T4778] EXT4-fs (loop3): 1 truncate cleaned up [ 52.810919][ T4784] EXT4-fs (loop0): mount failed [ 52.854680][ T4778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 52.970613][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.010973][ T4804] loop4: detected capacity change from 0 to 1024 [ 53.022919][ T4806] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 53.034822][ T4806] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 53.037303][ T4804] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 53.067251][ T4804] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 53.134807][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.267992][ T4818] loop2: detected capacity change from 0 to 512 [ 53.302654][ T4818] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 53.329010][ T4818] EXT4-fs (loop2): mount failed [ 53.710690][ T4833] loop4: detected capacity change from 0 to 8192 [ 53.737217][ T4833] vfat: Unknown parameter 'GPL' [ 54.037277][ T4870] __nla_validate_parse: 1 callbacks suppressed [ 54.037303][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 54.052661][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 54.091214][ T4870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.542'. [ 54.100219][ T4870] netlink: 24 bytes leftover after parsing attributes in process `syz.0.542'. [ 54.174414][ T4881] netlink: 'syz.0.546': attribute type 3 has an invalid length. [ 54.351734][ T4894] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4894 comm=syz.3.553 [ 54.424854][ T4898] loop0: detected capacity change from 0 to 8192 [ 54.433994][ T4898] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 54.793611][ T4930] serio: Serial port ptm0 [ 54.927688][ T4936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 55.045454][ T4946] netlink: 'syz.2.574': attribute type 13 has an invalid length. [ 55.061369][ T4950] loop1: detected capacity change from 0 to 164 [ 55.073086][ T4950] syz.1.575: attempt to access beyond end of device [ 55.073086][ T4950] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 55.091014][ T4946] gretap0: refused to change device tx_queue_len [ 55.097418][ T4946] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 55.113348][ T4950] syz.1.575: attempt to access beyond end of device [ 55.113348][ T4950] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 55.178558][ T4956] loop4: detected capacity change from 0 to 512 [ 55.200677][ T4956] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 55.227599][ T4956] EXT4-fs (loop4): 1 truncate cleaned up [ 55.239712][ T4956] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.328041][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.426491][ T4988] netlink: 12 bytes leftover after parsing attributes in process `syz.3.592'. [ 55.486190][ T4999] loop3: detected capacity change from 0 to 512 [ 55.496147][ T4999] EXT4-fs error (device loop3): ext4_iget_extra_inode:5035: inode #15: comm syz.3.596: corrupted in-inode xattr: e_value size too large [ 55.512224][ T4999] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.596: couldn't read orphan inode 15 (err -117) [ 55.525232][ T4999] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.555105][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.616358][ T5015] program syz.3.601 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.625861][ T5015] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 55.760861][ T5034] sd 0:0:1:0: device reset [ 55.772305][ T5035] IPVS: stopping master sync thread 5036 ... [ 55.778502][ T5036] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 55.819999][ T5038] loop4: detected capacity change from 0 to 1024 [ 55.827622][ T5038] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 55.838651][ T5038] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 55.851407][ T5038] JBD2: no valid journal superblock found [ 55.857316][ T5038] EXT4-fs (loop4): Could not load journal inode [ 55.872747][ T5038] @: renamed from vlan0 (while UP) [ 55.906698][ T5049] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 55.976732][ T5051] loop4: detected capacity change from 0 to 8192 [ 56.312985][ T5077] loop2: detected capacity change from 0 to 512 [ 56.341715][ T5077] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 56.351443][ T5082] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.363561][ T5077] System zones: 0-2, 18-18, 34-35 [ 56.382604][ T5077] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #4: comm syz.2.631: iget: bad i_size value: 5910974510929920 [ 56.395754][ T5077] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.631: Bad quota inode: 4, type: 1 [ 56.438945][ T5077] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 56.454837][ T5082] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.461480][ T5077] EXT4-fs (loop2): mount failed [ 56.516041][ T5082] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.571082][ T5082] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.590645][ T5098] vlan1: entered allmulticast mode [ 56.595919][ T5098] bond0: entered allmulticast mode [ 56.601127][ T5098] bond_slave_0: entered allmulticast mode [ 56.606876][ T5098] bond_slave_1: entered allmulticast mode [ 56.637246][ T5082] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.649619][ T5082] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.663002][ T5082] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.675673][ T5082] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.791304][ T5103] bridge0: entered promiscuous mode [ 56.833447][ T5103] bridge0: port 3(macvlan2) entered blocking state [ 56.846199][ T5103] bridge0: port 3(macvlan2) entered disabled state [ 56.855386][ T5103] macvlan2: entered allmulticast mode [ 56.862565][ T5103] bridge0: entered allmulticast mode [ 56.871846][ T5103] macvlan2: left allmulticast mode [ 56.877303][ T5103] bridge0: left allmulticast mode [ 56.885769][ T5103] bridge0: left promiscuous mode [ 57.080172][ T5135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.655'. [ 57.091852][ T5136] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.130748][ T5136] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.211553][ T5136] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.271497][ T5136] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.382778][ T5155] netlink: 9 bytes leftover after parsing attributes in process `syz.0.665'. [ 57.397595][ T5155] gretap0: entered promiscuous mode [ 57.408050][ T5155] netlink: 5 bytes leftover after parsing attributes in process `syz.0.665'. [ 57.417551][ T5155] 0{X: renamed from gretap0 [ 57.424654][ T5155] 0{X: left promiscuous mode [ 57.429853][ T5155] 0{X: entered allmulticast mode [ 57.436859][ T5155] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 57.456724][ T5162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.668'. [ 57.578150][ T5178] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.673' sets config #1 [ 57.593146][ T5180] loop3: detected capacity change from 0 to 256 [ 57.616470][ T5180] FAT-fs (loop3): IO charset cp932 not found [ 57.639746][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 57.639828][ T29] audit: type=1326 audit(1749245291.324:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.672168][ T29] audit: type=1326 audit(1749245291.354:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.695679][ T29] audit: type=1326 audit(1749245291.354:788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.719271][ T29] audit: type=1326 audit(1749245291.354:789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.746758][ T29] audit: type=1326 audit(1749245291.354:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.770133][ T29] audit: type=1326 audit(1749245291.354:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.795401][ T29] audit: type=1326 audit(1749245291.354:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.818671][ T29] audit: type=1326 audit(1749245291.374:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.842100][ T29] audit: type=1326 audit(1749245291.374:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.865422][ T29] audit: type=1326 audit(1749245291.374:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5187 comm="syz.0.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 57.889543][ T5193] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 58.445401][ T5216] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 58.578373][ T5239] sd 0:0:1:0: device reset [ 58.682343][ T5255] netlink: 'syz.3.712': attribute type 1 has an invalid length. [ 58.720853][ T5260] loop1: detected capacity change from 0 to 512 [ 58.732793][ T5260] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 58.746230][ T5266] sd 0:0:1:0: device reset [ 58.748061][ T5260] System zones: 0-2, 18-18, 34-35 [ 58.756534][ T5260] EXT4-fs error (device loop1): ext4_quota_enable:7124: inode #4: comm syz.1.715: iget: bad i_size value: 5910974510929920 [ 58.779823][ T5260] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.715: Bad quota inode: 4, type: 1 [ 58.791801][ T5260] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 58.819394][ T5260] EXT4-fs (loop1): mount failed [ 58.900295][ T5282] netlink: 'syz.0.724': attribute type 13 has an invalid length. [ 58.951612][ T5288] loop1: detected capacity change from 0 to 256 [ 58.975992][ T5282] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.983288][ T5282] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.996960][ T5291] loop2: detected capacity change from 0 to 1024 [ 59.006265][ T5291] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 59.017744][ T5291] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 59.028427][ T5291] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #32: comm syz.2.729: iget: special inode unallocated [ 59.042188][ T5291] EXT4-fs (loop2): Remounting filesystem read-only [ 59.048920][ T5291] EXT4-fs (loop2): no journal found [ 59.052024][ T5295] sd 0:0:1:0: device reset [ 59.054139][ T5291] EXT4-fs (loop2): can't get journal size [ 59.067869][ T5291] EXT4-fs (loop2): filesystem is read-only [ 59.074222][ T5291] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 59.082275][ T5282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 59.101272][ T5282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 59.131416][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.150953][ T5282] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.159433][ T5282] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.167983][ T5282] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.176675][ T5282] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.243343][ T5307] loop3: detected capacity change from 0 to 512 [ 59.274604][ T5307] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 59.292194][ T5307] System zones: 0-2, 18-18, 34-35 [ 59.299094][ T5307] EXT4-fs error (device loop3): ext4_quota_enable:7124: inode #4: comm syz.3.733: iget: bad i_size value: 5910974510929920 [ 59.318888][ T5307] EXT4-fs error (device loop3): ext4_quota_enable:7127: comm syz.3.733: Bad quota inode: 4, type: 1 [ 59.346795][ T5322] sg_write: data in/out 2008/14 bytes for SCSI command 0x0-- guessing data in; [ 59.346795][ T5322] program syz.1.739 not setting count and/or reply_len properly [ 59.373238][ T5307] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 59.392114][ T5307] EXT4-fs (loop3): mount failed [ 59.474985][ T5324] loop1: detected capacity change from 0 to 2049 [ 59.487964][ T5324] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 64 [ 59.772789][ T5348] tipc: Started in network mode [ 59.777853][ T5348] tipc: Node identity 4, cluster identity 4711 [ 59.784199][ T5348] tipc: Node number set to 4 [ 60.358425][ T5360] netlink: 'syz.1.758': attribute type 1 has an invalid length. [ 60.388811][ T5366] __nla_validate_parse: 4 callbacks suppressed [ 60.388829][ T5366] netlink: 9 bytes leftover after parsing attributes in process `syz.1.760'. [ 60.405536][ T5366] gretap0: entered promiscuous mode [ 60.417873][ T5366] netlink: 5 bytes leftover after parsing attributes in process `syz.1.760'. [ 60.426934][ T5366] 0{X: renamed from gretap0 [ 60.437783][ T5366] 0{X: left promiscuous mode [ 60.443062][ T5366] 0{X: entered allmulticast mode [ 60.449755][ T5367] Restarting kernel threads ... [ 60.456350][ T5366] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 60.472542][ T5367] Done restarting kernel threads. [ 60.529407][ T5374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.548167][ T5374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.846123][ C0] vcan0: j1939_tp_rxtimer: 0xffff888118c1ea00: rx timeout, send abort [ 60.854490][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888118c1ea00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 61.003996][ T5418] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 61.071023][ T5402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.080619][ T5402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.114448][ T5424] loop3: detected capacity change from 0 to 8192 [ 61.494855][ T5136] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.506996][ T5136] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.518916][ T5136] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.531230][ T5136] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.636615][ T5439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.795'. [ 61.680530][ T5447] xt_hashlimit: max too large, truncated to 1048576 [ 61.713975][ T5452] lo: entered promiscuous mode [ 61.720141][ T5452] tunl0: entered promiscuous mode [ 61.726232][ T5452] gre0: entered promiscuous mode [ 61.733617][ T5452] 0{X: entered promiscuous mode [ 61.739211][ T5452] 0{X: left allmulticast mode [ 61.746749][ T5452] erspan0: entered promiscuous mode [ 61.753255][ T5452] ip_vti0: entered promiscuous mode [ 61.760737][ T5452] ip6_vti0: entered promiscuous mode [ 61.767199][ T5452] sit0: entered promiscuous mode [ 61.775703][ T5452] ip6tnl0: entered promiscuous mode [ 61.783194][ T5452] ip6gre0: entered promiscuous mode [ 61.789521][ T5452] syz_tun: entered promiscuous mode [ 61.795834][ T5452] ip6gretap0: entered promiscuous mode [ 61.803072][ T5452] bridge0: entered promiscuous mode [ 61.809307][ T5452] vcan0: entered promiscuous mode [ 61.815195][ T5452] bond0: entered promiscuous mode [ 61.820367][ T5452] bond_slave_0: entered promiscuous mode [ 61.826175][ T5452] bond_slave_1: entered promiscuous mode [ 61.832935][ T5452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.841296][ T5452] team0: entered promiscuous mode [ 61.846399][ T5452] team_slave_0: entered promiscuous mode [ 61.852245][ T5452] team_slave_1: entered promiscuous mode [ 61.858434][ T5452] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.867331][ T5452] dummy0: entered promiscuous mode [ 61.875194][ T5452] nlmon0: entered promiscuous mode [ 61.881384][ T5452] caif0: entered promiscuous mode [ 61.886513][ T5452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 61.977658][ T5464] netlink: 172 bytes leftover after parsing attributes in process `syz.1.809'. [ 61.991809][ T5472] gtp0: entered promiscuous mode [ 62.001315][ T5468] netlink: 88 bytes leftover after parsing attributes in process `syz.3.811'. [ 62.008986][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 62.010241][ T5468] netlink: 88 bytes leftover after parsing attributes in process `syz.3.811'. [ 62.299151][ T5493] Restarting kernel threads ... [ 62.304288][ T5493] Done restarting kernel threads. [ 62.561995][ T5512] netlink: 12 bytes leftover after parsing attributes in process `syz.0.830'. [ 62.582840][ T5507] bridge0: entered promiscuous mode [ 62.603230][ T5507] bridge0: port 3(macvlan2) entered blocking state [ 62.610268][ T5507] bridge0: port 3(macvlan2) entered disabled state [ 62.620140][ T5507] macvlan2: entered allmulticast mode [ 62.626437][ T5507] bridge0: entered allmulticast mode [ 62.635699][ T5507] macvlan2: left allmulticast mode [ 62.641680][ T5507] bridge0: left allmulticast mode [ 62.658639][ T5507] bridge0: left promiscuous mode [ 62.751809][ T29] kauditd_printk_skb: 188 callbacks suppressed [ 62.751823][ T29] audit: type=1326 audit(1749245296.434:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.808259][ T29] audit: type=1326 audit(1749245296.434:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.832438][ T29] audit: type=1326 audit(1749245296.434:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.855811][ T29] audit: type=1326 audit(1749245296.434:987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.880401][ T29] audit: type=1326 audit(1749245296.434:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.905410][ T29] audit: type=1326 audit(1749245296.434:989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.929101][ T29] audit: type=1326 audit(1749245296.434:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.952530][ T29] audit: type=1326 audit(1749245296.434:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 62.976780][ T29] audit: type=1326 audit(1749245296.434:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 63.001115][ T29] audit: type=1326 audit(1749245296.464:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5529 comm="syz.1.847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 63.120933][ T5551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.149933][ T5551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.977805][ T5573] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.119572][ T5589] loop4: detected capacity change from 0 to 512 [ 64.126678][ T5589] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 64.127117][ T5592] sch_tbf: burst 0 is lower than device veth0_vlan mtu (1514) ! [ 64.138573][ T5589] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e11c, mo2=0102] [ 64.153909][ T5589] EXT4-fs (loop4): orphan cleanup on readonly fs [ 64.161105][ T5589] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #11: comm syz.4.856: attempt to clear invalid blocks 1024 len 1 [ 64.176544][ T5589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.856: bg 0: block 361: padding at end of block bitmap is not set [ 64.198035][ T5589] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 64.207512][ T5589] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.856: invalid indirect mapped block 1811939328 (level 0) [ 64.223126][ T5589] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.856: invalid indirect mapped block 2185560079 (level 1) [ 64.237546][ T5589] EXT4-fs (loop4): 1 truncate cleaned up [ 64.244871][ T5589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 64.267724][ T5589] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 64.296601][ T5598] bridge0: entered promiscuous mode [ 64.321357][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 64.330795][ T5598] bridge0: port 3(macvlan2) entered blocking state [ 64.338495][ T5598] bridge0: port 3(macvlan2) entered disabled state [ 64.363355][ T5598] macvlan2: entered allmulticast mode [ 64.364461][ T5605] sd 0:0:1:0: device reset [ 64.372579][ T5598] bridge0: entered allmulticast mode [ 64.404253][ T5598] macvlan2: left allmulticast mode [ 64.410252][ T5598] bridge0: left allmulticast mode [ 64.418077][ T5609] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 64.418077][ T5609] program syz.4.865 not setting count and/or reply_len properly [ 64.444378][ T5598] bridge0: left promiscuous mode [ 64.496600][ T5617] lo: entered promiscuous mode [ 64.502806][ T5617] tunl0: entered promiscuous mode [ 64.509452][ T5617] gre0: entered promiscuous mode [ 64.516359][ T5617] gretap0: entered promiscuous mode [ 64.523109][ T5617] erspan0: entered promiscuous mode [ 64.536920][ T5598] syz.2.858 (5598) used greatest stack depth: 9800 bytes left [ 64.559294][ T5617] ip_vti0: entered promiscuous mode [ 64.574119][ T5617] ip6_vti0: entered promiscuous mode [ 64.589997][ T5617] sit0: entered promiscuous mode [ 64.599788][ T5617] ip6tnl0: entered promiscuous mode [ 64.606533][ T5617] ip6gre0: entered promiscuous mode [ 64.613755][ T5617] syz_tun: entered promiscuous mode [ 64.620347][ T5617] ip6gretap0: entered promiscuous mode [ 64.627266][ T5617] bridge0: entered promiscuous mode [ 64.634187][ T5617] vcan0: entered promiscuous mode [ 64.639685][ T5617] bond0: entered promiscuous mode [ 64.644827][ T5617] bond_slave_0: entered promiscuous mode [ 64.650602][ T5617] bond_slave_1: entered promiscuous mode [ 64.659688][ T5617] team0: entered promiscuous mode [ 64.665448][ T5617] team_slave_0: entered promiscuous mode [ 64.671251][ T5617] team_slave_1: entered promiscuous mode [ 64.679785][ T5617] dummy0: entered promiscuous mode [ 64.686320][ T5617] nlmon0: entered promiscuous mode [ 64.695341][ T5617] caif0: entered promiscuous mode [ 64.700480][ T5617] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 65.751101][ T5700] netlink: 'syz.2.893': attribute type 13 has an invalid length. [ 65.784417][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.791773][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.845585][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.856609][ T5700] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.908000][ T5700] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.917611][ T5700] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.926117][ T5700] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.934582][ T5700] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.029068][ T5713] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 66.036485][ T5713] vhci_hcd: default hub control req: 1f03 v0017 i0001 l0 [ 66.252459][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 66.334562][ T5740] xt_hashlimit: size too large, truncated to 1048576 [ 66.388882][ T5741] C: renamed from lo [ 66.401395][ T5741] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 66.438128][ T5743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5743 comm=syz.1.913 [ 66.450682][ T5743] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=5743 comm=syz.1.913 [ 66.517811][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.527832][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.535467][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.576386][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.584069][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.591781][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.599301][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.606926][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.614507][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.622072][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.629714][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.637334][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.644788][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.652243][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.660174][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.667770][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.675616][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.683136][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.690671][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.698099][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.706370][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.714032][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.721492][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.729179][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.736651][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.744142][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.751616][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.759069][ T3416] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 66.768946][ T3416] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz0 [ 66.990792][ T5783] loop4: detected capacity change from 0 to 2048 [ 67.050579][ T5794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.935'. [ 67.332873][ T5821] netlink: 156 bytes leftover after parsing attributes in process `syz.4.945'. [ 67.343400][ T5821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.945'. [ 67.386959][ T5825] gtp0: entered promiscuous mode [ 67.397961][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.948'. [ 67.634039][ T5844] netlink: 'syz.4.954': attribute type 13 has an invalid length. [ 67.743161][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.840500][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.852055][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.894544][ T5844] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.903350][ T5844] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.911900][ T5844] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.920467][ T5844] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.037320][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.044931][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.052398][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.060626][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.068063][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.075538][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.082985][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.090501][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.097921][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.105409][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.112969][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.120496][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.128052][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.128817][ T29] kauditd_printk_skb: 69 callbacks suppressed [ 68.128834][ T29] audit: type=1400 audit(1749245301.804:1063): avc: denied { setopt } for pid=5861 comm="syz.1.961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.135591][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.229708][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.237188][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.244728][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.252564][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.260177][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.267616][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.275106][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.282585][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.290140][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.297670][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.305128][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.312589][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.320168][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.327693][ T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 68.337482][ T9] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 68.481458][ T5878] Falling back ldisc for ttyS3. [ 68.674223][ T29] audit: type=1326 audit(1749245302.354:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 68.697717][ T29] audit: type=1326 audit(1749245302.354:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 68.749979][ T29] audit: type=1326 audit(1749245302.394:1066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 68.773661][ T29] audit: type=1326 audit(1749245302.394:1067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 68.797180][ T29] audit: type=1326 audit(1749245302.394:1068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 68.820596][ T29] audit: type=1326 audit(1749245302.394:1069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 68.844088][ T29] audit: type=1326 audit(1749245302.404:1070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5886 comm="syz.1.971" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 68.977541][ T5912] loop3: detected capacity change from 0 to 512 [ 68.991164][ T5912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.020154][ T5912] ext4 filesystem being mounted at /224/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.099652][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.190083][ T29] audit: type=1326 audit(1749245302.874:1071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 69.213598][ T29] audit: type=1326 audit(1749245302.874:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5931 comm="syz.1.995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 69.409205][ T5935] chnl_net:caif_netlink_parms(): no params data found [ 69.451978][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.459310][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.466702][ T5935] bridge_slave_0: entered allmulticast mode [ 69.474806][ T5935] bridge_slave_0: entered promiscuous mode [ 69.481906][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.489137][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.496399][ T5935] bridge_slave_1: entered allmulticast mode [ 69.503086][ T5935] bridge_slave_1: entered promiscuous mode [ 69.524631][ T5935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.535643][ T5935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.560862][ T5935] team0: Port device team_slave_0 added [ 69.567707][ T5935] team0: Port device team_slave_1 added [ 69.585390][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.592692][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.618837][ T5935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.630205][ T5935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.637234][ T5935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.663486][ T5935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.691907][ T5935] hsr_slave_0: entered promiscuous mode [ 69.698102][ T5935] hsr_slave_1: entered promiscuous mode [ 69.704256][ T5935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.711941][ T5935] Cannot create hsr debugfs directory [ 69.797058][ T5935] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 69.806251][ T5935] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 69.816553][ T5935] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 69.825946][ T5935] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 69.844577][ T5935] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.851862][ T5935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.859292][ T5935] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.866548][ T5935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.896310][ T5935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.908448][ T4454] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.918767][ T4454] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.931090][ T5935] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.941223][ T4454] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.948305][ T4454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.959278][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.966377][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.042278][ T5935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.232697][ T5935] veth0_vlan: entered promiscuous mode [ 70.241249][ T5935] veth1_vlan: entered promiscuous mode [ 70.256923][ T5935] veth0_macvtap: entered promiscuous mode [ 70.270199][ T5935] veth1_macvtap: entered promiscuous mode [ 70.282074][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.294663][ T5935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.305226][ T5935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.314092][ T5935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.322970][ T5935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.332030][ T5935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.586412][ T6005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1005'. [ 71.216362][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1024'. [ 71.351061][ T6050] loop3: detected capacity change from 0 to 256 [ 71.361718][ T6053] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 71.377494][ T6053] SELinux: failed to load policy [ 71.380767][ T6050] FAT-fs (loop3): bogus number of FAT sectors [ 71.388556][ T6050] FAT-fs (loop3): Can't find a valid FAT filesystem [ 71.502554][ T6068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6068 comm=syz.1.1037 [ 71.515299][ T6068] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6068 comm=syz.1.1037 [ 71.932619][ T6119] netlink: 'syz.5.1062': attribute type 10 has an invalid length. [ 71.947238][ T6119] veth0_vlan: entered allmulticast mode [ 71.976684][ T6119] veth0_vlan: left promiscuous mode [ 71.984899][ T6119] veth0_vlan: entered promiscuous mode [ 71.996089][ T6119] team0: Device veth0_vlan failed to register rx_handler [ 72.127977][ T6142] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 72.248548][ T6152] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1078'. [ 72.361725][ T6164] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 72.369740][ T6164] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 72.675120][ T6199] loop5: detected capacity change from 0 to 128 [ 72.825500][ T6205] vlan2: entered allmulticast mode [ 72.830847][ T6205] vlan1: entered allmulticast mode [ 73.002713][ T6213] loop3: detected capacity change from 0 to 164 [ 73.015021][ T6215] xt_time: unknown flags 0xc [ 73.156846][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 73.156921][ T29] audit: type=1326 audit(1749245306.834:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.210508][ T29] audit: type=1326 audit(1749245306.874:1183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.234029][ T29] audit: type=1326 audit(1749245306.874:1184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.242618][ T6239] macvlan1: entered promiscuous mode [ 73.257526][ T29] audit: type=1326 audit(1749245306.874:1185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.257554][ T29] audit: type=1326 audit(1749245306.874:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.257579][ T29] audit: type=1326 audit(1749245306.874:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.280629][ T6239] ipvlan0: entered promiscuous mode [ 73.286284][ T29] audit: type=1326 audit(1749245306.874:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.362492][ T29] audit: type=1326 audit(1749245306.874:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.385941][ T29] audit: type=1326 audit(1749245306.874:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.409470][ T29] audit: type=1326 audit(1749245306.874:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6235 comm="syz.4.1117" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 73.434828][ T6239] ipvlan0: left promiscuous mode [ 73.440217][ T6239] macvlan1: left promiscuous mode [ 73.521994][ T6250] loop4: detected capacity change from 0 to 512 [ 73.528728][ T6250] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 73.561879][ T6255] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 73.588855][ T6258] syzkaller1: entered promiscuous mode [ 73.594456][ T6258] syzkaller1: entered allmulticast mode [ 73.635544][ T3395] IPVS: starting estimator thread 0... [ 73.728724][ T6267] IPVS: using max 2352 ests per chain, 117600 per kthread [ 73.844842][ T6288] block device autoloading is deprecated and will be removed. [ 73.950191][ T6293] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1141'. [ 74.364667][ T6326] vlan1: entered promiscuous mode [ 74.405004][ T6331] loop5: detected capacity change from 0 to 1024 [ 74.446201][ T6335] vlan2: entered allmulticast mode [ 74.451460][ T6335] vlan1: entered allmulticast mode [ 74.456699][ T6335] 0{X: entered allmulticast mode [ 74.469182][ T6331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.485041][ T6335] bridge0: port 3(vlan2) entered blocking state [ 74.491591][ T6335] bridge0: port 3(vlan2) entered disabled state [ 74.519983][ T5935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.521599][ T6335] vlan2: entered promiscuous mode [ 74.535349][ T6335] bridge0: port 3(vlan2) entered blocking state [ 74.541827][ T6335] bridge0: port 3(vlan2) entered forwarding state [ 74.554012][ T6343] loop3: detected capacity change from 0 to 512 [ 74.561236][ T6343] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 74.600274][ T6343] EXT4-fs (loop3): 1 truncate cleaned up [ 74.615986][ T6346] loop5: detected capacity change from 0 to 512 [ 74.637786][ T6343] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.641038][ T6346] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 74.753079][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.800514][ T6366] loop3: detected capacity change from 0 to 256 [ 74.809226][ T6366] FAT-fs (loop3): bogus number of FAT sectors [ 74.815342][ T6366] FAT-fs (loop3): Can't find a valid FAT filesystem [ 74.899504][ T6381] random: crng reseeded on system resumption [ 74.920246][ T6378] vlan2: entered allmulticast mode [ 74.925450][ T6378] vlan1: entered allmulticast mode [ 74.930686][ T6378] veth0_vlan: entered allmulticast mode [ 74.940220][ T6378] bridge0: port 3(vlan2) entered blocking state [ 74.946590][ T6378] bridge0: port 3(vlan2) entered disabled state [ 74.954331][ T6378] vlan2: entered promiscuous mode [ 74.959708][ T6378] vlan1: entered promiscuous mode [ 74.965298][ T6378] bridge0: port 3(vlan2) entered blocking state [ 74.971706][ T6378] bridge0: port 3(vlan2) entered forwarding state [ 75.064902][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 75.151001][ T6411] bridge0: entered promiscuous mode [ 75.156520][ T6411] macsec1: entered promiscuous mode [ 75.165957][ T6411] bridge0: port 4(macsec1) entered blocking state [ 75.172928][ T6411] bridge0: port 4(macsec1) entered disabled state [ 75.179788][ T6411] macsec1: entered allmulticast mode [ 75.185119][ T6411] bridge0: entered allmulticast mode [ 75.208900][ T6411] macsec1: left allmulticast mode [ 75.214008][ T6411] bridge0: left allmulticast mode [ 75.237752][ T6418] netlink: 'syz.3.1197': attribute type 3 has an invalid length. [ 75.262050][ T6411] bridge0: left promiscuous mode [ 75.299201][ T6422] loop5: detected capacity change from 0 to 8192 [ 75.763950][ T6459] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1212'. [ 75.807213][ T6463] rdma_op ffff888148281d80 conn xmit_rdma 0000000000000000 [ 76.157963][ T6491] lo speed is unknown, defaulting to 1000 [ 76.164880][ T6491] lo speed is unknown, defaulting to 1000 [ 76.171590][ T6491] lo speed is unknown, defaulting to 1000 [ 76.178509][ T6491] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 76.189155][ T6491] lo speed is unknown, defaulting to 1000 [ 76.195606][ T6491] lo speed is unknown, defaulting to 1000 [ 76.202039][ T6491] lo speed is unknown, defaulting to 1000 [ 76.208830][ T6491] lo speed is unknown, defaulting to 1000 [ 76.215956][ T6491] lo speed is unknown, defaulting to 1000 [ 76.222386][ T6491] lo speed is unknown, defaulting to 1000 [ 76.519990][ T6510] loop1: detected capacity change from 0 to 256 [ 76.527082][ T6510] FAT-fs (loop1): bogus number of FAT sectors [ 76.533253][ T6510] FAT-fs (loop1): Can't find a valid FAT filesystem [ 76.533693][ T6512] bridge0: entered promiscuous mode [ 76.545800][ T6512] macsec1: entered promiscuous mode [ 76.552324][ T6512] bridge0: port 3(macsec1) entered blocking state [ 76.558956][ T6512] bridge0: port 3(macsec1) entered disabled state [ 76.566386][ T6512] macsec1: entered allmulticast mode [ 76.567012][ T6513] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27745 sclass=netlink_route_socket pid=6513 comm=syz.3.1235 [ 76.571754][ T6512] bridge0: entered allmulticast mode [ 76.619955][ T6512] macsec1: left allmulticast mode [ 76.625144][ T6512] bridge0: left allmulticast mode [ 76.650922][ T6512] bridge0: left promiscuous mode [ 76.696440][ T6526] netlink: 'syz.3.1244': attribute type 1 has an invalid length. [ 76.727041][ T6528] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 76.784266][ T6536] loop7: detected capacity change from 0 to 16384 [ 76.805333][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 76.814595][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 76.823679][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 76.847952][ T6547] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 76.857789][ T6547] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 76.867260][ T6536] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 0 [ 76.885884][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 76.895001][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 76.904035][ T6542] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1251'. [ 76.916910][ T6536] I/O error, dev loop7, sector 5120 op 0x0:(READ) flags 0x80700 phys_seg 4 prio class 0 [ 76.943538][ T6536] I/O error, dev loop7, sector 4864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 76.953099][ T6536] Buffer I/O error on dev loop7, logical block 608, async page read [ 76.985127][ T6535] I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 76.994946][ T6535] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 77.003569][ T6535] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 77.012078][ T6535] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 77.020640][ T6535] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 77.029161][ T6535] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 77.037681][ T6535] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 77.046192][ T6535] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 77.054587][ T6535] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 77.078837][ T6535] I/O error, dev loop7, sector 1032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 77.097510][ T6535] I/O error, dev loop7, sector 2056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 77.113111][ T6535] I/O error, dev loop7, sector 3080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 77.127129][ T6535] I/O error, dev loop7, sector 4104 op 0x1:(WRITE) flags 0x800 phys_seg 95 prio class 0 [ 77.153281][ T6565] loop1: detected capacity change from 0 to 8192 [ 77.193996][ T6577] netlink: zone id is out of range [ 77.203847][ T6577] netlink: zone id is out of range [ 77.210624][ T6577] netlink: zone id is out of range [ 77.215823][ T6577] netlink: zone id is out of range [ 77.221105][ T6577] netlink: zone id is out of range [ 77.226262][ T6577] netlink: zone id is out of range [ 77.231437][ T6577] netlink: zone id is out of range [ 77.236560][ T6577] netlink: zone id is out of range [ 77.241803][ T6577] netlink: zone id is out of range [ 77.247031][ T6577] netlink: zone id is out of range [ 77.304531][ T6584] loop4: detected capacity change from 0 to 256 [ 77.312973][ T6584] FAT-fs (loop4): bogus number of FAT sectors [ 77.319170][ T6584] FAT-fs (loop4): Can't find a valid FAT filesystem [ 77.353022][ T6586] wireguard0: entered promiscuous mode [ 77.358810][ T6586] wireguard0: entered allmulticast mode [ 77.586596][ T2961] hid-generic FFFC:0003:0000.0005: unknown main item tag 0x0 [ 77.594099][ T2961] hid-generic FFFC:0003:0000.0005: unknown main item tag 0x0 [ 77.601552][ T2961] hid-generic FFFC:0003:0000.0005: unknown main item tag 0x0 [ 77.609003][ T2961] hid-generic FFFC:0003:0000.0005: unknown main item tag 0x0 [ 77.616531][ T2961] hid-generic FFFC:0003:0000.0005: unknown main item tag 0x0 [ 77.624112][ T2961] hid-generic FFFC:0003:0000.0005: unknown main item tag 0x0 [ 77.643200][ T6601] netlink: 'syz.5.1274': attribute type 3 has an invalid length. [ 77.677972][ T2961] hid-generic FFFC:0003:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 77.862098][ T6620] loop4: detected capacity change from 0 to 1024 [ 77.923113][ T6620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.961163][ T6620] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.040609][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.125619][ T6641] netlink: 'syz.4.1290': attribute type 3 has an invalid length. [ 78.135491][ T6639] loop3: detected capacity change from 0 to 8192 [ 78.281449][ T6649] 9pnet: p9_errstr2errno: server reported unknown error @L O!L [ 78.369191][ T6654] ALSA: seq fatal error: cannot create timer (-19) [ 78.508564][ T6670] loop1: detected capacity change from 0 to 512 [ 78.515405][ T6670] EXT4-fs: Ignoring removed i_version option [ 78.522499][ T6670] EXT4-fs (loop1): orphan cleanup on readonly fs [ 78.529336][ T6670] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1305: bg 0: block 131: padding at end of block bitmap is not set [ 78.544240][ T6670] EXT4-fs (loop1): Remounting filesystem read-only [ 78.565796][ T6670] EXT4-fs (loop1): 1 truncate cleaned up [ 78.572744][ T6670] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.602987][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.624671][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 78.624685][ T29] audit: type=1400 audit(1749245312.304:1325): avc: denied { read } for pid=6672 comm="syz.1.1306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 78.778423][ T6685] __nla_validate_parse: 4 callbacks suppressed [ 78.778443][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1311'. [ 78.797270][ T29] audit: type=1326 audit(1749245312.474:1326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 78.823300][ T29] audit: type=1326 audit(1749245312.474:1327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 78.846860][ T29] audit: type=1326 audit(1749245312.504:1328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 78.873227][ T29] audit: type=1326 audit(1749245312.504:1329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6686 comm="syz.1.1312" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 79.072910][ T29] audit: type=1326 audit(1749245312.694:1330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 79.096444][ T29] audit: type=1326 audit(1749245312.694:1331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 79.120240][ T29] audit: type=1326 audit(1749245312.694:1332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 79.143688][ T29] audit: type=1326 audit(1749245312.694:1333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 79.167199][ T29] audit: type=1326 audit(1749245312.694:1334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6704 comm="syz.1.1322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 79.211017][ T6713] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1326'. [ 79.285680][ T6723] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1330'. [ 79.295567][ T6723] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1330'. [ 79.438795][ T6747] SELinux: Context system_u:object_r:scanner_device_t:s0 is not valid (left unmapped). [ 79.516825][ T6758] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.540597][ T6762] netlink: 532 bytes leftover after parsing attributes in process `syz.4.1349'. [ 79.773606][ T6778] vlan0: entered allmulticast mode [ 79.778847][ T6778] bond0: entered allmulticast mode [ 79.784094][ T6778] bond_slave_0: entered allmulticast mode [ 79.790039][ T6778] bond_slave_1: entered allmulticast mode [ 79.816135][ T6778] bond0: (slave vlan0): Opening slave failed [ 79.949517][ T6793] loop5: detected capacity change from 0 to 2048 [ 79.981517][ T6793] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.089366][ T6807] geneve0: entered allmulticast mode [ 80.247002][ T6821] loop4: detected capacity change from 0 to 512 [ 80.268486][ T6821] EXT4-fs: Ignoring removed i_version option [ 80.288797][ T6821] EXT4-fs (loop4): orphan cleanup on readonly fs [ 80.332050][ T6821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1376: bg 0: block 131: padding at end of block bitmap is not set [ 80.387593][ T6821] EXT4-fs (loop4): Remounting filesystem read-only [ 80.411012][ T6821] EXT4-fs (loop4): 1 truncate cleaned up [ 80.433258][ T6821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 80.482411][ T6829] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 80.490233][ T6829] netlink: 'syz.3.1379': attribute type 2 has an invalid length. [ 80.498215][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1379'. [ 80.537042][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.705676][ T3395] kernel write not supported for file /665/attr/exec (pid: 3395 comm: kworker/1:3) [ 80.769516][ T4742] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 80.784697][ T4742] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 80.797334][ T4742] EXT4-fs (loop5): This should not happen!! Data will be lost [ 80.797334][ T4742] [ 80.807228][ T4742] EXT4-fs (loop5): Total free blocks count 0 [ 80.813369][ T4742] EXT4-fs (loop5): Free/Dirty block details [ 80.819467][ T4742] EXT4-fs (loop5): free_blocks=2415919504 [ 80.825405][ T4742] EXT4-fs (loop5): dirty_blocks=16400 [ 80.830899][ T4742] EXT4-fs (loop5): Block reservation details [ 80.836987][ T4742] EXT4-fs (loop5): i_reserved_data_blocks=1025 [ 80.858008][ T4742] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 81.056061][ T6857] loop5: detected capacity change from 0 to 512 [ 81.062947][ T6857] EXT4-fs: Ignoring removed mblk_io_submit option [ 81.069917][ T6857] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 81.080945][ T6857] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 81.088982][ T6857] System zones: 1-12 [ 81.093900][ T6857] EXT4-fs (loop5): 1 truncate cleaned up [ 81.100004][ T6857] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.243836][ T5935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.479663][ T6868] sd 0:0:1:0: device reset [ 81.490230][ T6869] wireguard1: entered promiscuous mode [ 81.495855][ T6869] wireguard1: entered allmulticast mode [ 81.520935][ T6874] Falling back ldisc for ptm0. [ 81.544255][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1401'. [ 81.674891][ T6882] loop7: detected capacity change from 0 to 16384 [ 81.743737][ T6888] netlink: 'syz.0.1407': attribute type 1 has an invalid length. [ 81.753937][ T6889] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 81.936795][ T6913] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1419'. [ 82.038338][ T6927] wireguard0: entered promiscuous mode [ 82.044057][ T6927] wireguard0: entered allmulticast mode [ 82.204810][ T6942] ALSA: seq fatal error: cannot create timer (-19) [ 82.224542][ T6948] loop1: detected capacity change from 0 to 512 [ 82.241072][ T6948] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.259489][ T6948] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.271870][ T6948] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 82.280000][ T6948] System zones: 1-12 [ 82.284697][ T6948] EXT4-fs (loop1): 1 truncate cleaned up [ 82.290760][ T6948] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.468516][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.517379][ T6967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1442'. [ 82.526699][ T6967] netlink: 'syz.1.1442': attribute type 5 has an invalid length. [ 82.689349][ T6990] xt_hashlimit: max too large, truncated to 1048576 [ 82.744245][ T6994] loop1: detected capacity change from 0 to 1024 [ 82.760386][ T6994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.829149][ T7003] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1456'. [ 82.831312][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.966613][ T7019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.979443][ T7019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.093487][ T3388] Process accounting resumed [ 84.246908][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 84.246926][ T29] audit: type=1400 audit(1749245317.924:1390): avc: denied { write } for pid=7064 comm="syz.4.1486" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 84.284281][ T7068] netlink: 420 bytes leftover after parsing attributes in process `syz.4.1487'. [ 84.317552][ T7072] loop4: detected capacity change from 0 to 1024 [ 84.373043][ T7072] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.387676][ T7072] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.405028][ T7072] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 84.421791][ T7072] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 84.434225][ T7072] EXT4-fs (loop4): This should not happen!! Data will be lost [ 84.434225][ T7072] [ 84.443993][ T7072] EXT4-fs (loop4): Total free blocks count 0 [ 84.450220][ T7072] EXT4-fs (loop4): Free/Dirty block details [ 84.456698][ T7072] EXT4-fs (loop4): free_blocks=4293918720 [ 84.462489][ T7072] EXT4-fs (loop4): dirty_blocks=64 [ 84.467732][ T7072] EXT4-fs (loop4): Block reservation details [ 84.474313][ T7072] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 84.520367][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.643860][ T29] audit: type=1326 audit(1749245318.324:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.668014][ T29] audit: type=1326 audit(1749245318.324:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.695777][ T29] audit: type=1326 audit(1749245318.324:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.719575][ T29] audit: type=1326 audit(1749245318.324:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.743217][ T29] audit: type=1326 audit(1749245318.324:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.766665][ T29] audit: type=1326 audit(1749245318.324:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.790188][ T29] audit: type=1326 audit(1749245318.334:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.813806][ T29] audit: type=1326 audit(1749245318.334:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.838239][ T29] audit: type=1326 audit(1749245318.334:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7109 comm="syz.1.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa80e08e929 code=0x7ffc0000 [ 84.881920][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1520'. [ 84.997225][ T7137] loop4: detected capacity change from 0 to 512 [ 85.004668][ T7137] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.017463][ T7137] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.1518: invalid block [ 85.030650][ T7137] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1518: invalid indirect mapped block 4294967295 (level 1) [ 85.045228][ T7137] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1518: invalid indirect mapped block 4294967295 (level 1) [ 85.060011][ T7137] EXT4-fs (loop4): 2 truncates cleaned up [ 85.066119][ T7137] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.084980][ T7137] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1340: inode #12: block 7: comm syz.4.1518: path /276/file0/file0: bad entry in directory: rec_len % 4 != 0 - offset=259, inode=4278190093, rec_len=255, size=60 fake=0 [ 85.121733][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.199110][ T7153] bridge_slave_0: left allmulticast mode [ 85.204921][ T7153] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.306938][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1526'. [ 85.405887][ T7162] netlink: 'syz.4.1528': attribute type 1 has an invalid length. [ 85.408098][ T7164] loop7: detected capacity change from 0 to 16384 [ 85.413734][ T7162] netlink: 'syz.4.1528': attribute type 4 has an invalid length. [ 85.427948][ T7162] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.1528'. [ 85.475095][ T7167] blk_print_req_error: 8 callbacks suppressed [ 85.475114][ T7167] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 85.475494][ T7164] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 85.481398][ T7167] buffer_io_error: 1208 callbacks suppressed [ 85.481413][ T7167] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 85.493630][ T7164] I/O error, dev loop7, sector 10752 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 0 [ 85.526675][ T7164] I/O error, dev loop7, sector 10496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 85.536228][ T7164] Buffer I/O error on dev loop7, logical block 1312, async page read [ 85.580195][ T7163] I/O error, dev loop7, sector 8 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 85.589991][ T7163] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 85.598538][ T7163] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 85.607087][ T7163] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 85.615569][ T7163] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 85.624127][ T7163] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 85.632557][ T7163] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 85.640942][ T7163] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 85.649360][ T7163] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 85.660667][ T7163] I/O error, dev loop7, sector 1032 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 85.673709][ T7163] I/O error, dev loop7, sector 2056 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 85.689205][ T7163] I/O error, dev loop7, sector 3080 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 85.707305][ T7163] I/O error, dev loop7, sector 4104 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 85.722305][ T7163] I/O error, dev loop7, sector 5128 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 0 [ 85.869900][ T7187] xt_hashlimit: max too large, truncated to 1048576 [ 85.881498][ T7192] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1540'. [ 86.127108][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1560'. [ 86.258516][ T7256] smc: net device bond0 applied user defined pnetid SYZ0 [ 86.274185][ T7256] smc: net device bond0 erased user defined pnetid SYZ0 [ 86.310873][ T7263] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.360151][ T7267] loop3: detected capacity change from 0 to 1024 [ 86.396045][ T7267] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.431629][ T7267] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.462317][ T7267] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 86.478827][ T7267] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 86.491558][ T7267] EXT4-fs (loop3): This should not happen!! Data will be lost [ 86.491558][ T7267] [ 86.501354][ T7267] EXT4-fs (loop3): Total free blocks count 0 [ 86.507478][ T7267] EXT4-fs (loop3): Free/Dirty block details [ 86.514056][ T7267] EXT4-fs (loop3): free_blocks=4293918720 [ 86.520048][ T7267] EXT4-fs (loop3): dirty_blocks=64 [ 86.525192][ T7267] EXT4-fs (loop3): Block reservation details [ 86.531430][ T7267] EXT4-fs (loop3): i_reserved_data_blocks=4 [ 86.619798][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.877201][ T1035] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 86.886084][ T1035] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 86.976980][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.994393][ T7311] bridge_slave_0: left allmulticast mode [ 87.000409][ T7311] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.028448][ T7315] xt_hashlimit: max too large, truncated to 1048576 [ 87.309984][ T7355] loop4: detected capacity change from 0 to 512 [ 87.318922][ T7355] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.1612: corrupted in-inode xattr: invalid ea_ino [ 87.348676][ T7355] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1612: couldn't read orphan inode 15 (err -117) [ 87.363074][ T7355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.384161][ T7359] pimreg: entered allmulticast mode [ 87.401007][ T7359] pimreg: left allmulticast mode [ 87.425034][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.466915][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1616'. [ 87.699705][ T7388] netlink: 'syz.5.1627': attribute type 1 has an invalid length. [ 87.707520][ T7388] netlink: 'syz.5.1627': attribute type 4 has an invalid length. [ 87.715351][ T7388] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.1627'. [ 87.858361][ T7394] netlink: 'syz.5.1630': attribute type 11 has an invalid length. [ 87.886582][ T7394] netlink: 448 bytes leftover after parsing attributes in process `syz.5.1630'. [ 87.926891][ T7398] loop4: detected capacity change from 0 to 1024 [ 87.943759][ T7398] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 87.968738][ T7398] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 87.991494][ T7398] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #32: comm syz.4.1632: iget: special inode unallocated [ 88.013374][ T7398] EXT4-fs (loop4): no journal found [ 88.018750][ T7398] EXT4-fs (loop4): can't get journal size [ 88.037308][ T7398] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.1632: iget: special inode unallocated [ 88.050876][ T7398] EXT4-fs (loop4): get root inode failed [ 88.056567][ T7398] EXT4-fs (loop4): mount failed [ 88.523997][ T2961] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 88.532139][ T2961] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 88.606297][ T7451] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1661'. [ 88.760741][ T7466] veth0: entered promiscuous mode [ 88.786170][ T7466] veth0: left promiscuous mode [ 89.552960][ T29] kauditd_printk_skb: 135 callbacks suppressed [ 89.552977][ T29] audit: type=1326 audit(1749245323.234:1535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.694358][ T29] audit: type=1326 audit(1749245323.264:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.717938][ T29] audit: type=1326 audit(1749245323.304:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.741582][ T29] audit: type=1326 audit(1749245323.304:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.765129][ T29] audit: type=1326 audit(1749245323.304:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.788674][ T29] audit: type=1326 audit(1749245323.304:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.812358][ T29] audit: type=1326 audit(1749245323.304:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.835871][ T29] audit: type=1326 audit(1749245323.304:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.859280][ T29] audit: type=1326 audit(1749245323.304:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.882728][ T29] audit: type=1326 audit(1749245323.304:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7503 comm="syz.0.1673" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 89.992698][ T7518] atomic_op ffff88812ab4e528 conn xmit_atomic 0000000000000000 [ 90.030833][ T7524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1680'. [ 90.252464][ T7550] netem: change failed [ 90.452909][ T7566] loop3: detected capacity change from 0 to 512 [ 90.502517][ T7566] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 90.531694][ T7566] EXT4-fs (loop3): 1 truncate cleaned up [ 90.537917][ T7566] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.586152][ T7574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1704'. [ 90.601362][ T3316] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.794181][ T7589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1712'. [ 90.849963][ T7597] loop1: detected capacity change from 0 to 512 [ 90.858387][ T7597] EXT4-fs error (device loop1): ext4_iget_extra_inode:5035: inode #15: comm syz.1.1715: corrupted in-inode xattr: invalid ea_ino [ 90.876155][ T7597] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.1715: couldn't read orphan inode 15 (err -117) [ 90.898225][ T7597] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.962703][ T7610] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1721'. [ 90.994661][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.022464][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1725'. [ 91.031457][ T7616] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1725'. [ 91.060346][ T7616] wireguard1: entered promiscuous mode [ 91.066033][ T7616] wireguard1: entered allmulticast mode [ 91.255840][ T7631] loop1: detected capacity change from 0 to 512 [ 91.722606][ T7621] net_ratelimit: 26 callbacks suppressed [ 91.722626][ T7621] Set syz1 is full, maxelem 65536 reached [ 91.742869][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 91.752034][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 91.776700][ T7662] hub 1-0:1.0: USB hub found [ 91.788721][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 91.788728][ T7662] hub 1-0:1.0: 8 ports detected [ 91.823788][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 92.043446][ T7686] batadv1: entered promiscuous mode [ 92.225780][ T7705] loop5: detected capacity change from 0 to 1024 [ 92.258290][ T7705] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.299088][ T5935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.750279][ T7749] SELinux: ebitmap: truncated map [ 92.762031][ T7754] loop1: detected capacity change from 0 to 2048 [ 92.769552][ T7749] SELinux: failed to load policy [ 92.810834][ T7754] loop1: p1 < > p4 [ 92.815319][ T7754] loop1: p4 size 8388608 extends beyond EOD, truncated [ 92.971539][ T7770] openvswitch: netlink: Message has 6 unknown bytes. [ 93.076192][ T7781] loop5: detected capacity change from 0 to 164 [ 93.084957][ T7778] loop1: detected capacity change from 0 to 2048 [ 93.119975][ T7786] program syz.3.1798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.139425][ T7778] EXT4-fs: Invalid want_extra_isize 2587 [ 93.174814][ T7778] loop1: detected capacity change from 0 to 512 [ 93.207343][ T7778] EXT4-fs (loop1): 1 orphan inode deleted [ 93.220337][ T4739] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:60: Failed to release dquot type 1 [ 93.227808][ T7778] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.246698][ T7778] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.283618][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.362051][ T7815] ipvlan2: entered promiscuous mode [ 93.369747][ T7815] bridge0: port 1(ipvlan2) entered blocking state [ 93.376480][ T7815] bridge0: port 1(ipvlan2) entered disabled state [ 93.418897][ T7815] ipvlan2: entered allmulticast mode [ 93.424327][ T7815] bridge0: entered allmulticast mode [ 93.430497][ T7815] ipvlan2: left allmulticast mode [ 93.435556][ T7815] bridge0: left allmulticast mode [ 93.487058][ T7825] pim6reg1: entered promiscuous mode [ 93.492588][ T7825] pim6reg1: entered allmulticast mode [ 93.504733][ T7827] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 94.040414][ T7887] hub 1-0:1.0: USB hub found [ 94.045121][ T7887] hub 1-0:1.0: 8 ports detected [ 94.111353][ T7895] binfmt_misc: register: failed to install interpreter file ./file0 [ 94.376391][ T7912] loop5: detected capacity change from 0 to 2048 [ 94.403957][ T7913] batadv1: entered promiscuous mode [ 94.440872][ T7912] EXT4-fs: Invalid want_extra_isize 2587 [ 94.455376][ T7912] loop5: detected capacity change from 0 to 512 [ 94.474578][ T7912] EXT4-fs (loop5): 1 orphan inode deleted [ 94.507495][ T57] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 94.529355][ T7912] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.559377][ T7912] ext4 filesystem being mounted at /170/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.590987][ T7921] hub 1-0:1.0: USB hub found [ 94.605733][ T7921] hub 1-0:1.0: 8 ports detected [ 94.677701][ T5935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.899046][ T7952] program syz.0.1873 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.002580][ T7960] 9pnet: p9_errstr2errno: server reported unknown error AC [ 95.133122][ T7966] loop1: detected capacity change from 0 to 2048 [ 95.192573][ T7966] loop1: p1 < > p4 [ 95.197909][ T7966] loop1: p4 size 8388608 extends beyond EOD, truncated [ 95.206236][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 95.206253][ T29] audit: type=1400 audit(1749245328.894:1650): avc: denied { create } for pid=7969 comm="syz.0.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 95.369474][ T7983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.376736][ T7983] IPv6: NLM_F_CREATE should be set when creating new route [ 95.624255][ T8001] __nla_validate_parse: 7 callbacks suppressed [ 95.624275][ T8001] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1895'. [ 96.012796][ T29] audit: type=1326 audit(1749245329.694:1651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 96.036384][ T29] audit: type=1326 audit(1749245329.694:1652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 96.060129][ T29] audit: type=1326 audit(1749245329.694:1653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 96.084012][ T29] audit: type=1326 audit(1749245329.694:1654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f34ca4ee963 code=0x7ffc0000 [ 96.127241][ T8024] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1906'. [ 96.179982][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'. [ 96.224231][ T29] audit: type=1326 audit(1749245329.804:1655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f34ca4ed3df code=0x7ffc0000 [ 96.248342][ T29] audit: type=1326 audit(1749245329.834:1656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f34ca4ee9b7 code=0x7ffc0000 [ 96.272228][ T29] audit: type=1326 audit(1749245329.834:1657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f34ca4ed290 code=0x7ffc0000 [ 96.296262][ T29] audit: type=1326 audit(1749245329.834:1658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f34ca4ed58a code=0x7ffc0000 [ 96.320123][ T29] audit: type=1326 audit(1749245329.864:1659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8021 comm="syz.0.1905" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34ca4ee929 code=0x7ffc0000 [ 96.376112][ T8028] vlan3: entered allmulticast mode [ 96.618934][ T8044] Falling back ldisc for ttyS3. [ 96.814993][ T8069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1927'. [ 96.901296][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1931'. [ 97.057139][ T8083] loop5: detected capacity change from 0 to 8192 [ 97.077530][ T8089] loop4: detected capacity change from 0 to 1024 [ 97.176359][ T8089] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.229127][ T8102] SELinux: Context is not valid (left unmapped). [ 97.276053][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.723763][ T8156] syz.3.1964 (8156) used greatest stack depth: 9416 bytes left [ 98.406098][ T8196] syzkaller0: entered promiscuous mode [ 98.411768][ T8196] syzkaller0: entered allmulticast mode [ 98.421139][ T8192] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 98.438849][ T8192] SELinux: failed to load policy [ 98.565694][ T8205] SELinux: failed to load policy [ 98.731001][ T8220] loop1: detected capacity change from 0 to 8192 [ 98.745982][ T8229] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 98.771132][ T8228] -: renamed from syzkaller0 [ 98.987559][ T8243] loop1: detected capacity change from 0 to 2048 [ 99.012055][ T8243] EXT4-fs (loop1): failed to initialize system zone (-117) [ 99.023914][ T8243] EXT4-fs (loop1): mount failed [ 99.102539][ T8258] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2008'. [ 99.315748][ T8277] loop5: detected capacity change from 0 to 512 [ 99.342793][ T8277] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 99.389907][ T8277] EXT4-fs (loop5): 1 truncate cleaned up [ 99.396160][ T8277] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.454502][ T5935] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.476798][ T8284] loop1: detected capacity change from 0 to 512 [ 99.489087][ T8284] EXT4-fs: Ignoring removed oldalloc option [ 99.516635][ T8284] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 99.554112][ T8292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2021'. [ 99.556068][ T8284] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 99.590613][ T8284] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a846c01c, mo2=0102] [ 99.601807][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2024'. [ 99.614500][ T8284] System zones: 0-2, 18-18, 34-34 [ 99.620468][ T8284] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 99.630646][ T8284] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2019: iget: bad i_size value: 360287970189639680 [ 99.644422][ T8299] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2021'. [ 99.670342][ T8284] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2019: couldn't read orphan inode 15 (err -117) [ 99.683155][ T8284] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.705494][ T8302] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 99.737455][ T8284] rose0: refused to change device tx_queue_len [ 99.772282][ T8309] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2029'. [ 99.794363][ T8311] loop4: detected capacity change from 0 to 512 [ 99.801310][ T8311] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 99.886928][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.033714][ T8344] loop5: detected capacity change from 0 to 1024 [ 100.047493][ T8346] loop4: detected capacity change from 0 to 1024 [ 100.054859][ T8344] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 100.065881][ T8344] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 100.106180][ T8344] JBD2: no valid journal superblock found [ 100.111998][ T8344] EXT4-fs (loop5): Could not load journal inode [ 100.133592][ T8344] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 100.143769][ T8346] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.207686][ T8346] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 100.320110][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.493118][ T8384] bridge: RTM_NEWNEIGH with invalid ether address [ 100.539809][ T8386] lo speed is unknown, defaulting to 1000 [ 100.930751][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 100.930769][ T29] audit: type=1400 audit(1749245334.614:1864): avc: denied { nlmsg_write } for pid=8406 comm="syz.5.2072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 101.001570][ T29] audit: type=1326 audit(1749245334.684:1865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8414 comm="syz.3.2076" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b6e2ce929 code=0x0 [ 101.189995][ T8428] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 101.245577][ T8436] loop4: detected capacity change from 0 to 1024 [ 101.280670][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.289902][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.299016][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.338848][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.347864][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.356923][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.424486][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.434029][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.443085][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2085'. [ 101.608780][ T29] audit: type=1326 audit(1749245335.284:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.632539][ T29] audit: type=1326 audit(1749245335.284:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.663928][ T29] audit: type=1326 audit(1749245335.334:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.688063][ T29] audit: type=1326 audit(1749245335.334:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.711598][ T29] audit: type=1326 audit(1749245335.334:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.735199][ T29] audit: type=1326 audit(1749245335.334:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.759413][ T29] audit: type=1326 audit(1749245335.334:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.786783][ T29] audit: type=1326 audit(1749245335.334:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8457 comm="syz.5.2092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 101.863610][ T8465] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2094'. [ 102.155651][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.173151][ T8490] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.408061][ T8502] serio: Serial port ttyS3 [ 102.438555][ T8504] loop4: detected capacity change from 0 to 512 [ 102.456248][ T8504] EXT4-fs: Ignoring removed bh option [ 102.470328][ T8504] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 102.479468][ T8504] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 102.492156][ T8507] bridge0: port 1(bond0) entered blocking state [ 102.498561][ T8507] bridge0: port 1(bond0) entered disabled state [ 102.513660][ T8504] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 102.516994][ T8507] bridge0: port 1(bond0) entered blocking state [ 102.529309][ T8507] bridge0: port 1(bond0) entered forwarding state [ 102.536463][ T8504] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 102.547488][ T8510] bridge0: port 1(bond0) entered disabled state [ 102.554879][ T8504] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.587864][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.648921][ T8514] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 102.655547][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.663177][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 102.695916][ T8514] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 102.702492][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 102.710180][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 102.729303][ T8514] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.738397][ T8514] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(9) [ 102.744948][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 102.752567][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 102.769547][ T8514] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(11) [ 102.776191][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.783856][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 102.810704][ T8514] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 102.820404][ T8514] vhci_hcd vhci_hcd.0: pdev(4) rhport(6) sockfd(15) [ 102.820483][ T8530] netlink: 'syz.0.2118': attribute type 3 has an invalid length. [ 102.827098][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 102.842503][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 102.858628][ T10] vhci_hcd: vhci_device speed not set [ 102.891534][ T8514] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(17) [ 102.898214][ T8514] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 102.905962][ T8514] vhci_hcd vhci_hcd.0: Device attached [ 102.927074][ T8537] vhci_hcd: connection closed [ 102.927086][ T8531] vhci_hcd: connection closed [ 102.932064][ T4912] vhci_hcd: stop threads [ 102.941072][ T4912] vhci_hcd: release socket [ 102.945529][ T4912] vhci_hcd: disconnect device [ 102.946919][ T8527] vhci_hcd: connection closed [ 102.950388][ T10] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 102.962679][ T8516] vhci_hcd: connection closed [ 102.962748][ T4912] vhci_hcd: stop threads [ 102.962848][ T8525] vhci_hcd: connection closed [ 102.967460][ T4912] vhci_hcd: release socket [ 102.971858][ T8521] vhci_hcd: connection closed [ 102.976415][ T4912] vhci_hcd: disconnect device [ 102.979037][ T4912] vhci_hcd: stop threads [ 102.995127][ T4912] vhci_hcd: release socket [ 102.999615][ T4912] vhci_hcd: disconnect device [ 103.004690][ T8517] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 103.012322][ T4912] vhci_hcd: stop threads [ 103.016781][ T4912] vhci_hcd: release socket [ 103.021273][ T4912] vhci_hcd: disconnect device [ 103.027485][ T4912] vhci_hcd: stop threads [ 103.031979][ T4912] vhci_hcd: release socket [ 103.036508][ T4912] vhci_hcd: disconnect device [ 103.041828][ T4912] vhci_hcd: stop threads [ 103.046144][ T4912] vhci_hcd: release socket [ 103.050602][ T4912] vhci_hcd: disconnect device [ 103.080099][ T8556] bridge0: port 1(bond0) entered blocking state [ 103.086459][ T8556] bridge0: port 1(bond0) entered disabled state [ 103.093232][ T8556] bond0: entered allmulticast mode [ 103.098636][ T8556] bond_slave_0: entered allmulticast mode [ 103.104415][ T8556] bond_slave_1: entered allmulticast mode [ 103.112228][ T8556] bond0: entered promiscuous mode [ 103.117509][ T8556] bond_slave_0: entered promiscuous mode [ 103.123377][ T8556] bond_slave_1: entered promiscuous mode [ 103.129672][ T8556] bridge0: port 1(bond0) entered blocking state [ 103.136126][ T8556] bridge0: port 1(bond0) entered forwarding state [ 103.248756][ T8567] sch_tbf: burst 0 is lower than device lo mtu (16) ! [ 103.564707][ T8605] wg2: entered promiscuous mode [ 103.569826][ T8605] wg2: entered allmulticast mode [ 103.959669][ T3416] IPVS: starting estimator thread 0... [ 103.984208][ T8631] loop3: detected capacity change from 0 to 8192 [ 104.079366][ T8637] IPVS: using max 2352 ests per chain, 117600 per kthread [ 104.164286][ T8650] lo speed is unknown, defaulting to 1000 [ 104.298053][ T8659] bond1: entered promiscuous mode [ 104.303235][ T8659] bond1: entered allmulticast mode [ 104.319676][ T8659] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.331821][ T8659] bond1 (unregistering): Released all slaves [ 104.575068][ T8686] vhci_hcd: default hub control req: 0000 v0000 i0000 l65535 [ 104.648130][ T8695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.897422][ T8719] lo speed is unknown, defaulting to 1000 [ 105.631645][ T8729] pim6reg1: entered promiscuous mode [ 105.637051][ T8729] pim6reg1: entered allmulticast mode [ 105.752091][ T8741] loop1: detected capacity change from 0 to 1024 [ 105.783506][ T8742] lo speed is unknown, defaulting to 1000 [ 105.804101][ T8741] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.155087][ T8769] bond1: entered promiscuous mode [ 106.160216][ T8769] bond1: entered allmulticast mode [ 106.165635][ T8769] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.174714][ T8769] bond1 (unregistering): Released all slaves [ 106.468914][ T8783] loop4: detected capacity change from 0 to 164 [ 106.486398][ T8783] syz.4.2220: attempt to access beyond end of device [ 106.486398][ T8783] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 106.515108][ T8783] syz.4.2220: attempt to access beyond end of device [ 106.515108][ T8783] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 106.723832][ T3307] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.761672][ T8787] xt_CT: You must specify a L4 protocol and not use inversions on it [ 106.842148][ T29] kauditd_printk_skb: 99 callbacks suppressed [ 106.842164][ T29] audit: type=1326 audit(1749245340.524:1973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 106.879768][ T29] audit: type=1326 audit(1749245340.554:1974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 106.903333][ T29] audit: type=1326 audit(1749245340.554:1975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 106.926932][ T29] audit: type=1326 audit(1749245340.554:1976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 106.950437][ T29] audit: type=1326 audit(1749245340.554:1977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 106.973931][ T29] audit: type=1326 audit(1749245340.554:1978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8788 comm="syz.5.2223" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab13fe929 code=0x7ffc0000 [ 107.069031][ T29] audit: type=1326 audit(1749245340.754:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 107.092691][ T29] audit: type=1326 audit(1749245340.754:1980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 107.121075][ T29] audit: type=1326 audit(1749245340.804:1981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 107.144689][ T29] audit: type=1326 audit(1749245340.804:1982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8805 comm="syz.4.2233" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39dcc9e929 code=0x7ffc0000 [ 107.189617][ T8812] loop4: detected capacity change from 0 to 1024 [ 107.199403][ T8812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.241196][ T8818] __nla_validate_parse: 11 callbacks suppressed [ 107.241224][ T8818] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2246'. [ 107.329406][ T8822] lo speed is unknown, defaulting to 1000 [ 107.433752][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 107.442870][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 107.473563][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 107.482768][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 107.525414][ T8812] ================================================================== [ 107.533559][ T8812] BUG: KCSAN: data-race in __filemap_remove_folio / filemap_write_and_wait_range [ 107.542731][ T8812] [ 107.545070][ T8812] read-write to 0xffff888106b15890 of 8 bytes by task 8820 on cpu 1: [ 107.553168][ T8812] __filemap_remove_folio+0x1bc/0x2a0 [ 107.558587][ T8812] folio_unmap_invalidate+0x1dd/0x360 [ 107.564001][ T8812] invalidate_inode_pages2_range+0x27c/0x3d0 [ 107.570019][ T8812] filemap_invalidate_pages+0x16d/0x1a0 [ 107.575583][ T8812] kiocb_invalidate_pages+0x6e/0x80 [ 107.580800][ T8812] __iomap_dio_rw+0x5d4/0x1250 [ 107.585686][ T8812] iomap_dio_rw+0x40/0x90 [ 107.590038][ T8812] ext4_file_write_iter+0xad9/0xf00 [ 107.595254][ T8812] iter_file_splice_write+0x5f2/0x970 [ 107.600658][ T8812] direct_splice_actor+0x156/0x2a0 [ 107.605806][ T8812] splice_direct_to_actor+0x312/0x680 [ 107.611295][ T8812] do_splice_direct+0xda/0x150 [ 107.616085][ T8812] do_sendfile+0x380/0x650 [ 107.620522][ T8812] __x64_sys_sendfile64+0x105/0x150 [ 107.625745][ T8812] x64_sys_call+0xb39/0x2fb0 [ 107.630353][ T8812] do_syscall_64+0xd2/0x200 [ 107.634869][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.640776][ T8812] [ 107.643104][ T8812] read to 0xffff888106b15890 of 8 bytes by task 8812 on cpu 0: [ 107.650660][ T8812] filemap_write_and_wait_range+0x59/0x340 [ 107.656631][ T8812] ext4_file_write_iter+0xe04/0xf00 [ 107.661851][ T8812] iter_file_splice_write+0x5f2/0x970 [ 107.667248][ T8812] direct_splice_actor+0x156/0x2a0 [ 107.672392][ T8812] splice_direct_to_actor+0x312/0x680 [ 107.677799][ T8812] do_splice_direct+0xda/0x150 [ 107.682587][ T8812] do_sendfile+0x380/0x650 [ 107.687024][ T8812] __x64_sys_sendfile64+0x105/0x150 [ 107.692241][ T8812] x64_sys_call+0xb39/0x2fb0 [ 107.696843][ T8812] do_syscall_64+0xd2/0x200 [ 107.701364][ T8812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.707267][ T8812] [ 107.709616][ T8812] value changed: 0x0000000000000001 -> 0x0000000000000000 [ 107.716728][ T8812] [ 107.719084][ T8812] Reported by Kernel Concurrency Sanitizer on: [ 107.725248][ T8812] CPU: 0 UID: 0 PID: 8812 Comm: syz.4.2234 Not tainted 6.15.0-syzkaller-13473-gc0c9379f235d #0 PREEMPT(voluntary) [ 107.737336][ T8812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.747505][ T8812] ================================================================== [ 107.789567][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 107.798656][ T8832] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2239'. [ 108.018995][ T10] usb 9-1: enqueue for inactive port 0 [ 108.032807][ T10] usb 9-1: enqueue for inactive port 0 [ 108.098767][ T10] vhci_hcd: vhci_device speed not set [ 108.124338][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.