last executing test programs: 50.062688375s ago: executing program 4 (id=1101): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@newsa={0xf0, 0x10, 0x713, 0x70bd27, 0x4, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3}, @in6=@remote, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x0, 0x0, 0x2f}, {@in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x1, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', {0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x8727e}, {0x0, 0xffffdffff7fffffb, 0x6, 0x5}, {0x1, 0x9, 0x8}, 0x80000004, 0x3506, 0xa, 0x4, 0x0, 0x21}}, 0xf0}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0xfffd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 50.031858328s ago: executing program 4 (id=1104): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x9, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 49.937029048s ago: executing program 4 (id=1112): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = fsmount(r0, 0x1, 0x6) fchdir(r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) 49.858241015s ago: executing program 4 (id=1116): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f0000001ec0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 49.857843815s ago: executing program 4 (id=1117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) getpriority(0x1, 0x0) 49.708657561s ago: executing program 4 (id=1122): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0xff, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x200, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0x4, 0xfff2}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) fdatasync(r0) 49.70834785s ago: executing program 32 (id=1122): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0xff, 0x2a4, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x200, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {0x4, 0xfff2}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) fdatasync(r0) 43.394208927s ago: executing program 1 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180200000020702500000000002020207b1af8ff00000000bfa100000000000007010000dbffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 42.764713249s ago: executing program 1 (id=1376): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1000}, 0x18) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000440)=[{&(0x7f0000001880)=""/4093, 0xffd}], 0x1, 0x0, 0x0, 0x20000800}, 0x0) 42.751135271s ago: executing program 1 (id=1378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x121880, 0x0) r2 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd=r1, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/103, 0x67}], 0x1, 0x0, 0x1}) io_uring_enter(r2, 0x36f0, 0x0, 0x0, 0x0, 0x0) 42.635607112s ago: executing program 1 (id=1383): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f0000001ec0)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 42.633572412s ago: executing program 1 (id=1385): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24004090, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000feffffff850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000040)="0426063d032bbb006965499a03b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 41.480663866s ago: executing program 1 (id=1444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 41.480240506s ago: executing program 33 (id=1444): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 2.542737128s ago: executing program 6 (id=2856): r0 = socket$inet(0x2, 0x2, 0x0) close(r0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x200000000000a, &(0x7f0000000000)="ea00005c00000000", 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setsockopt$inet_opts(r0, 0x0, 0xd, &(0x7f0000000240)="ea00aa6600000000", 0x8) 2.542345398s ago: executing program 6 (id=2858): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x30, 0x14, 0x509, 0x70bd2c, 0x0, {0x2, 0x18, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x8, 0x1, @multicast2}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x24}}]}, 0x30}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x70}}, 0x0) 2.541969907s ago: executing program 6 (id=2860): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000002480)=""/195, 0xc3}], 0x1}, 0x2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000280), &(0x7f0000000140)=r0}, 0x22) sendmsg$inet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) 2.471317795s ago: executing program 6 (id=2864): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) syz_usb_connect$uac1(0x4, 0x71, &(0x7f0000000580)=ANY=[], 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1.883301553s ago: executing program 6 (id=2879): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 1.727952278s ago: executing program 6 (id=2881): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="02070005020000"], 0x10}}, 0x4040014) 1.153529385s ago: executing program 3 (id=2910): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x44, r2, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xfe}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}]}, 0x44}}, 0x4) 1.10823762s ago: executing program 3 (id=2911): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.045743576s ago: executing program 3 (id=2914): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}, @printk]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.00316495s ago: executing program 3 (id=2917): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) statx(0xffffffffffffffff, 0x0, 0x100, 0x2, 0x0) 941.207506ms ago: executing program 3 (id=2920): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) 885.428762ms ago: executing program 3 (id=2922): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x531, &(0x7f0000000640)="$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") sendmsg$key(r2, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 846.835966ms ago: executing program 0 (id=2924): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) 792.400991ms ago: executing program 2 (id=2926): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@lazytime}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x19, 0x6, 0xb, 0x6, 0xfffffff0, 0x7}) 730.728117ms ago: executing program 0 (id=2927): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x64, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) 682.811362ms ago: executing program 0 (id=2929): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = gettid() process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 516.592678ms ago: executing program 5 (id=2931): prctl$PR_SET_NAME(0xf, &(0x7f0000000200)='gtp\x00\xe4\xaa\xae\xdf~2\xa6X\x14\x92\xdarV\xf4U\xf7\xa2\xc3l\x1b@\xaf\xf9\xc9\xa9#\xf0S\xd9=q\xd6\x14\xedt\xc8!W\xe9@\xeb\x7f~\tB0EE\x9a:\xb7\xff\xc1\xfc\x9a\x1f\xf2\xfb\x19\xda#x\xc5F\x1c~\x8c\xe1\xdf\xdc\x01k\f\xde0~\x95\r\xa2\x80\b4M\x14\xe7\xd0\t`n!g\x14\xe6\xd1\xc2\xd3\x88\xf8cVtd\xbeY\xa5\xe7\x16sD\x96}7\n\x88e\x00\xf0\xff\xff\xf0\xcb\x94\xb4S\x00\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 516.414308ms ago: executing program 0 (id=2932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_free\x00', r0}, 0x10) setrlimit(0x9, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@fadd={0x58, 0x114, 0x6, {{}, 0xfffffffffffffffc, 0x0}}], 0x58}, 0x0) 516.270278ms ago: executing program 5 (id=2933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000780)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$KEYCTL_MOVE(0x1e, r2, r2, r3, 0x0) 486.535051ms ago: executing program 0 (id=2934): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) ptrace$getenv(0x4201, 0x0, 0x5, 0x0) 485.253441ms ago: executing program 5 (id=2935): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='kfree\x00', r0}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) tkill(0x0, 0x7) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 474.814122ms ago: executing program 2 (id=2936): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000800018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000100), 0x10) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 419.932138ms ago: executing program 0 (id=2937): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000dfffff1918120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 419.681808ms ago: executing program 5 (id=2938): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x18) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000fff000/0x1000)=nil) 282.116191ms ago: executing program 2 (id=2939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010e0021000000000000004bc311ec85000000750000008508001f08e4000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x28}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='signal_generate\x00', r0}, 0x10) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='signal_generate\x00', r2, 0x0, 0x3}, 0x18) 233.627797ms ago: executing program 2 (id=2940): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 215.162958ms ago: executing program 5 (id=2941): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6}, 0x10) bind$packet(r0, &(0x7f0000000040)={0x11, 0x1, r1, 0x1, 0x9}, 0x14) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0xffe0}, {0x8, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) 116.610238ms ago: executing program 2 (id=2942): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 58.974414ms ago: executing program 2 (id=2943): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0xe0ff}, 0x80, &(0x7f0000000000), 0x0, 0x0, 0x28}, 0x41) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x40840) 0s ago: executing program 5 (id=2944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) kernel console output (not intermixed with test programs): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.765539][ T5353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 63.774680][ T5353] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'. [ 63.960830][ T5377] loop2: detected capacity change from 0 to 512 [ 63.995438][ T5377] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 64.010528][ T5377] EXT4-fs (loop2): mount failed [ 64.020649][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.070514][ T5383] netlink: '+}[@': attribute type 1 has an invalid length. [ 64.118260][ T5385] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.162313][ T5389] program syz.2.790 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.256913][ T5400] tipc: Started in network mode [ 64.261896][ T5400] tipc: Node identity ac141413, cluster identity 4711 [ 64.276730][ T5400] tipc: New replicast peer: 10.1.1.2 [ 64.282183][ T5400] tipc: Enabled bearer , priority 10 [ 64.342005][ T5407] loop2: detected capacity change from 0 to 1024 [ 64.350913][ T5407] EXT4-fs: Ignoring removed mblk_io_submit option [ 64.357510][ T5407] EXT4-fs: Ignoring removed bh option [ 64.363755][ T5407] ext3: Unknown parameter 'subj_type' [ 64.498338][ T29] kauditd_printk_skb: 148 callbacks suppressed [ 64.498357][ T29] audit: type=1326 audit(1759972148.475:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.561457][ T29] audit: type=1326 audit(1759972148.475:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.585113][ T29] audit: type=1326 audit(1759972148.475:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.608672][ T29] audit: type=1326 audit(1759972148.475:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.632089][ T29] audit: type=1326 audit(1759972148.475:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.655478][ T29] audit: type=1326 audit(1759972148.475:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.679069][ T29] audit: type=1326 audit(1759972148.505:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.702701][ T29] audit: type=1326 audit(1759972148.515:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.726136][ T29] audit: type=1326 audit(1759972148.525:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 64.749623][ T29] audit: type=1326 audit(1759972148.525:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5414 comm="syz.3.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 65.281421][ T9] tipc: Node number set to 2886997011 [ 65.477946][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 65.486986][ T5457] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 65.494789][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 65.509108][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.819'. [ 65.518082][ T5457] netlink: 'syz.2.819': attribute type 1 has an invalid length. [ 65.954803][ T5489] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 65.965178][ T5494] SELinux: policydb version 0 does not match my version range 15-35 [ 65.977649][ T5496] loop2: detected capacity change from 0 to 512 [ 65.991482][ T5494] SELinux: failed to load policy [ 65.996665][ T5496] EXT4-fs (loop2): orphan cleanup on readonly fs [ 66.004367][ T5496] EXT4-fs warning (device loop2): ext4_xattr_inode_get:560: inode #11: comm syz.2.836: EA inode hash validation failed [ 66.017126][ T5496] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.033979][ T5496] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.836: corrupted inode contents [ 66.059439][ T5496] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #15: comm syz.2.836: mark_inode_dirty error [ 66.071171][ T5496] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #15: comm syz.2.836: corrupted inode contents [ 66.083756][ T5496] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2996: inode #15: comm syz.2.836: mark_inode_dirty error [ 66.096034][ T5496] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2999: inode #15: comm syz.2.836: mark inode dirty (error -117) [ 66.109687][ T5496] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 66.141115][ T5496] EXT4-fs (loop2): 1 orphan inode deleted [ 66.148522][ T5509] IPVS: Error connecting to the multicast addr [ 66.167808][ T5496] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 66.198852][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.320073][ T5522] wireguard0: entered promiscuous mode [ 66.325654][ T5522] wireguard0: entered allmulticast mode [ 66.574347][ T3371] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 66.585350][ T3371] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.622919][ T5566] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=5566 comm=syz.1.864 [ 66.850693][ T5570] loop0: detected capacity change from 0 to 32768 [ 66.924943][ T5570] loop0: p1 p3 < > [ 66.971301][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 66.972754][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 67.079411][ T5583] vlan2: entered allmulticast mode [ 67.087307][ T5583] dummy0: entered allmulticast mode [ 67.201269][ T5597] SELinux: policydb version 0 does not match my version range 15-35 [ 67.209574][ T5597] SELinux: failed to load policy [ 67.252434][ T5600] batman_adv: batadv0: Adding interface: ipvlan2 [ 67.258951][ T5600] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.284499][ T5600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.295214][ T5600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.305156][ T5600] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 67.330822][ T5603] batman_adv: batadv0: Adding interface: ipvlan3 [ 67.337425][ T5603] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.362897][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.373467][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.383462][ T5603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: ipvlan2 [ 67.393328][ T5603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.403226][ T5603] batman_adv: batadv0: Not using interface ipvlan3 (retrying later): interface not active [ 67.437892][ T5608] loop1: detected capacity change from 0 to 512 [ 67.454468][ T5608] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 67.466732][ T5608] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2853: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 67.486570][ T5608] EXT4-fs (loop1): 1 truncate cleaned up [ 67.492891][ T5608] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.585590][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.744729][ T5630] loop3: detected capacity change from 0 to 32768 [ 67.796258][ T3304] loop3: p1 p2 p3 < p5 p6 > [ 67.802203][ T3304] loop3: p2 size 16775168 extends beyond EOD, truncated [ 67.814789][ T3304] loop3: p5 start 4294970168 is beyond EOD, truncated [ 67.826464][ T5630] loop3: p1 p2 p3 < p5 p6 > [ 67.832226][ T5630] loop3: p2 size 16775168 extends beyond EOD, truncated [ 67.840905][ T5630] loop3: p5 start 4294970168 is beyond EOD, truncated [ 67.853976][ T5630] macvtap0: refused to change device tx_queue_len [ 67.950301][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 67.960262][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 67.965752][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 67.971950][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 68.018766][ T4045] udevd[4045]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 68.019401][ T3305] udevd[3305]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory [ 68.031228][ T3493] udevd[3493]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 68.040111][ T3304] udevd[3304]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 68.059222][ T5647] __nla_validate_parse: 13 callbacks suppressed [ 68.059239][ T5647] netlink: 8 bytes leftover after parsing attributes in process `syz.0.898'. [ 68.162535][ T5658] xt_hashlimit: max too large, truncated to 1048576 [ 68.202136][ T5661] netlink: 8 bytes leftover after parsing attributes in process `syz.1.904'. [ 68.400277][ T5677] netlink: 'syz.3.912': attribute type 12 has an invalid length. [ 68.481344][ T5685] netlink: 'syz.0.913': attribute type 3 has an invalid length. [ 68.576025][ T5700] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 68.660904][ T5712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.926'. [ 68.674248][ T5711] loop3: detected capacity change from 0 to 512 [ 68.694160][ T5711] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.927: couldn't read orphan inode 26 (err -116) [ 68.707005][ T5711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.729935][ T5711] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.758251][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.181009][ T5761] team0: Caught tx_queue_len zero misconfig [ 69.206492][ T3371] IPVS: starting estimator thread 0... [ 69.301975][ T5764] IPVS: using max 2304 ests per chain, 115200 per kthread [ 69.346823][ T5778] loop3: detected capacity change from 0 to 512 [ 69.373359][ T5778] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.392649][ T5778] ext4 filesystem being mounted at /167/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 69.408811][ T5778] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.954: corrupted inode contents [ 69.421182][ T5778] EXT4-fs error (device loop3): ext4_dirty_inode:6509: inode #2: comm syz.3.954: mark_inode_dirty error [ 69.432834][ T5778] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #2: comm syz.3.954: corrupted inode contents [ 69.445152][ T5778] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #2: comm syz.3.954: mark_inode_dirty error [ 69.472594][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.512924][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 69.513007][ T29] audit: type=1400 audit(1759972153.495:1190): avc: denied { read append } for pid=5787 comm="syz.2.959" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.543542][ T29] audit: type=1400 audit(1759972153.495:1191): avc: denied { open } for pid=5787 comm="syz.2.959" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 69.575268][ T29] audit: type=1400 audit(1759972153.555:1192): avc: denied { create } for pid=5792 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.610982][ T5790] loop3: detected capacity change from 0 to 2048 [ 69.629334][ T29] audit: type=1400 audit(1759972153.595:1193): avc: denied { ioctl } for pid=5792 comm="syz.0.960" path="socket:[13456]" dev="sockfs" ino=13456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.654102][ T29] audit: type=1400 audit(1759972153.595:1194): avc: denied { setopt } for pid=5792 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.673459][ T29] audit: type=1400 audit(1759972153.595:1195): avc: denied { bind } for pid=5792 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.692814][ T29] audit: type=1400 audit(1759972153.595:1196): avc: denied { write } for pid=5792 comm="syz.0.960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 69.714326][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.0.961'. [ 69.723176][ T5790] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.741278][ T5790] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.958: bg 0: block 234: padding at end of block bitmap is not set [ 69.774135][ T29] audit: type=1400 audit(1759972153.715:1197): avc: denied { remove_name } for pid=5788 comm="syz.3.958" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.796816][ T29] audit: type=1400 audit(1759972153.715:1198): avc: denied { rename } for pid=5788 comm="syz.3.958" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 69.841708][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.856159][ T29] audit: type=1400 audit(1759972153.835:1199): avc: denied { create } for pid=5798 comm="syz.1.962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 70.028312][ T5818] loop1: detected capacity change from 0 to 256 [ 70.363135][ T5852] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 70.582367][ T5860] netlink: 20 bytes leftover after parsing attributes in process `syz.0.990'. [ 70.665066][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 70.678010][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.740896][ T5876] loop0: detected capacity change from 0 to 512 [ 70.748040][ T5876] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.879317][ T5887] team0: Caught tx_queue_len zero misconfig [ 71.068064][ T5907] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1012'. [ 71.197591][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 71.206566][ T5936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1024'. [ 71.215575][ T5936] netlink: 'syz.2.1024': attribute type 15 has an invalid length. [ 71.240001][ T3683] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 71.240011][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1024'. [ 71.240048][ T5936] netlink: 'syz.2.1024': attribute type 15 has an invalid length. [ 71.254731][ T3683] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 71.275789][ T3683] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 71.284899][ T3683] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 71.558948][ T5973] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 72.507096][ T6060] loop1: detected capacity change from 0 to 512 [ 73.081787][ T3683] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.158979][ T3683] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.202262][ T6157] SELinux: failed to load policy [ 73.242679][ T3683] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.304255][ T3683] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 73.325669][ T6173] 9pnet: p9_errstr2errno: server reported unknown error 9YTPX: [ 73.345285][ T6178] __nla_validate_parse: 8 callbacks suppressed [ 73.345305][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 73.416605][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 73.474550][ T3683] bridge_slave_1: left allmulticast mode [ 73.480258][ T3683] bridge_slave_1: left promiscuous mode [ 73.486251][ T3683] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.491966][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1129'. [ 73.520519][ T3683] bridge_slave_0: left allmulticast mode [ 73.526258][ T3683] bridge_slave_0: left promiscuous mode [ 73.532194][ T3683] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.637174][ T6214] netlink: 'syz.2.1134': attribute type 21 has an invalid length. [ 73.653768][ T3683] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.672256][ T3683] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.691212][ T3683] bond0 (unregistering): Released all slaves [ 73.719182][ T6214] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1134'. [ 73.728342][ T6214] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1134'. [ 73.761453][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 73.761518][ T3683] hsr_slave_0: left promiscuous mode [ 73.785446][ T3683] hsr_slave_1: left promiscuous mode [ 73.791251][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.799906][ T3683] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.874397][ T3683] team0 (unregistering): Port device team_slave_1 removed [ 73.886602][ T3683] team0 (unregistering): Port device team_slave_0 removed [ 74.030612][ T6232] 8021q: VLANs not supported on ip6_vti0 [ 74.071203][ T6279] ALSA: seq fatal error: cannot create timer (-22) [ 74.100095][ T6317] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1148'. [ 74.139467][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 74.207714][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.214964][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.224821][ T6163] bridge_slave_0: entered allmulticast mode [ 74.231888][ T6163] bridge_slave_0: entered promiscuous mode [ 74.239011][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.246389][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.254230][ T6163] bridge_slave_1: entered allmulticast mode [ 74.261063][ T6163] bridge_slave_1: entered promiscuous mode [ 74.295394][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.307695][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.338417][ T3683] IPVS: stop unused estimator thread 0... [ 74.365825][ T6163] team0: Port device team_slave_0 added [ 74.393113][ T6163] team0: Port device team_slave_1 added [ 74.456126][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.463245][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.489364][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.501862][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.508831][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.534887][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.546366][ T29] kauditd_printk_skb: 180 callbacks suppressed [ 74.546382][ T29] audit: type=1400 audit(1759972158.525:1380): avc: denied { write } for pid=6506 comm="syz.0.1157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 74.618197][ T6163] hsr_slave_0: entered promiscuous mode [ 74.625364][ T6163] hsr_slave_1: entered promiscuous mode [ 74.632359][ T6163] debugfs: 'hsr0' already exists in 'hsr' [ 74.638147][ T6163] Cannot create hsr debugfs directory [ 74.711831][ T6507] infiniband syz!: set down [ 74.716422][ T6507] infiniband syz!: added team_slave_0 [ 74.749267][ T6507] RDS/IB: syz!: added [ 74.853915][ T6163] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 74.868339][ T6163] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.886804][ T6163] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.903204][ T6163] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.921902][ T29] audit: type=1400 audit(1759972158.895:1381): avc: denied { ioctl } for pid=6645 comm="syz.2.1160" path="socket:[15517]" dev="sockfs" ino=15517 ioctlcmd=0x89a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 74.997439][ T29] audit: type=1400 audit(1759972158.965:1382): avc: denied { lock } for pid=6658 comm="syz.3.1161" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=15148 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 75.026404][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.033629][ T6163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.041166][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.048349][ T6163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.095509][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.116796][ T3678] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.125255][ T3678] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.173235][ T6163] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.183316][ T3717] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.190409][ T3717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.206367][ T3674] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.213543][ T3674] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.271847][ T6686] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1164'. [ 75.275541][ T29] audit: type=1326 audit(1759972159.245:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 75.304349][ T29] audit: type=1326 audit(1759972159.245:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 75.327941][ T29] audit: type=1326 audit(1759972159.245:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 75.351480][ T29] audit: type=1326 audit(1759972159.245:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 75.375007][ T29] audit: type=1326 audit(1759972159.245:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 75.398521][ T29] audit: type=1326 audit(1759972159.245:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 75.402670][ T6163] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 75.422020][ T29] audit: type=1326 audit(1759972159.245:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6684 comm="syz.3.1165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 75.432464][ T6163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.536303][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.623868][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 75.656647][ T6715] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1174'. [ 75.725878][ T6163] veth0_vlan: entered promiscuous mode [ 75.734580][ T6163] veth1_vlan: entered promiscuous mode [ 75.750049][ T6738] vxlan1: entered promiscuous mode [ 75.757523][ T3692] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.766828][ T3692] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.777715][ T3692] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.790774][ T3692] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 75.800556][ T6163] veth0_macvtap: entered promiscuous mode [ 75.808730][ T6163] veth1_macvtap: entered promiscuous mode [ 75.820656][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.833704][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.845488][ T3674] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.863986][ T3674] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.877688][ T3674] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.892378][ T3674] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.990091][ T6761] netlink: 'syz.3.1187': attribute type 4 has an invalid length. [ 76.014310][ T6765] loop5: detected capacity change from 0 to 512 [ 76.050817][ T6765] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.063642][ T6765] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 76.100373][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.283293][ T6824] netlink: 'syz.1.1207': attribute type 3 has an invalid length. [ 76.727558][ T6901] loop1: detected capacity change from 0 to 1024 [ 76.735579][ T6901] EXT4-fs: Ignoring removed nobh option [ 76.741196][ T6901] EXT4-fs: Ignoring removed bh option [ 76.747628][ T6901] EXT4-fs (loop1): stripe (8) is not aligned with cluster size (16), stripe is disabled [ 76.763921][ T6901] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.794939][ T3313] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.859571][ T6913] loop0: detected capacity change from 0 to 512 [ 76.872503][ T6913] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 76.884079][ T6913] EXT4-fs (loop0): 1 truncate cleaned up [ 76.890447][ T6913] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.978405][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.264889][ T6935] netlink: 'syz.5.1254': attribute type 27 has an invalid length. [ 77.311732][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.319167][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.356582][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.366391][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.419778][ T3717] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.475022][ T3717] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.509242][ T3717] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.521034][ T3717] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.760437][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 77.779217][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.039945][ T7105] SELinux: failed to load policy [ 78.072624][ T7115] netdevsim netdevsim0: Direct firmware load for ./bus failed with error -2 [ 78.082621][ T7119] batadv0: entered promiscuous mode [ 78.087868][ T7119] batadv0: entered allmulticast mode [ 78.214975][ T7148] SELinux: policydb version 0 does not match my version range 15-35 [ 78.223871][ T7148] SELinux: failed to load policy [ 78.292036][ T7160] SELinux: policydb version 0 does not match my version range 15-35 [ 78.300584][ T7160] SELinux: failed to load policy [ 78.400764][ T7172] loop0: detected capacity change from 0 to 512 [ 78.409967][ T7177] team0: Caught tx_queue_len zero misconfig [ 78.411027][ T7172] EXT4-fs (loop0): orphan cleanup on readonly fs [ 78.424901][ T7172] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1323: bg 0: block 248: padding at end of block bitmap is not set [ 78.440475][ T7172] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1323: Failed to acquire dquot type 1 [ 78.462402][ T7172] EXT4-fs (loop0): 1 truncate cleaned up [ 78.474693][ T7172] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 78.520580][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.568720][ T7199] loop2: detected capacity change from 0 to 2048 [ 78.607312][ T7199] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.716812][ T7231] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 78.731703][ T7231] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 192 with error 28 [ 78.744159][ T7231] EXT4-fs (loop2): This should not happen!! Data will be lost [ 78.744159][ T7231] [ 78.753947][ T7231] EXT4-fs (loop2): Total free blocks count 0 [ 78.760084][ T7231] EXT4-fs (loop2): Free/Dirty block details [ 78.766090][ T7231] EXT4-fs (loop2): free_blocks=2415919504 [ 78.771265][ T7233] __nla_validate_parse: 13 callbacks suppressed [ 78.771287][ T7233] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1343'. [ 78.771886][ T7231] EXT4-fs (loop2): dirty_blocks=208 [ 78.771901][ T7231] EXT4-fs (loop2): Block reservation details [ 78.771914][ T7231] EXT4-fs (loop2): i_reserved_data_blocks=13 [ 79.064820][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1349'. [ 79.114825][ T7250] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 79.345460][ T7291] loop3: detected capacity change from 0 to 256 [ 79.423551][ T7301] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 79.518901][ T3683] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 192 with max blocks 2048 with error 28 [ 79.568390][ T29] kauditd_printk_skb: 285 callbacks suppressed [ 79.568434][ T29] audit: type=1400 audit(1759972163.545:1673): avc: denied { mount } for pid=7323 comm="syz.5.1366" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.597397][ T29] audit: type=1400 audit(1759972163.575:1674): avc: denied { unmount } for pid=7323 comm="syz.5.1366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 79.643756][ T29] audit: type=1400 audit(1759972163.625:1675): avc: denied { setopt } for pid=7327 comm="syz.5.1367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.689573][ T29] audit: type=1326 audit(1759972163.625:1676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 79.713132][ T29] audit: type=1326 audit(1759972163.625:1677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 79.736716][ T29] audit: type=1326 audit(1759972163.625:1678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 79.760296][ T29] audit: type=1326 audit(1759972163.625:1679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 79.783777][ T29] audit: type=1326 audit(1759972163.625:1680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 79.807230][ T29] audit: type=1326 audit(1759972163.625:1681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 79.830713][ T29] audit: type=1326 audit(1759972163.625:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7329 comm="syz.0.1368" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 79.857968][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1370'. [ 79.895085][ T7339] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1370'. [ 80.328105][ T7402] netlink: 1347 bytes leftover after parsing attributes in process `syz.3.1392'. [ 80.352296][ T7409] sd 0:0:1:0: device reset [ 81.141605][ T7510] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7510 comm=syz.0.1432 [ 81.154200][ T7510] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=7510 comm=syz.0.1432 [ 81.270211][ T7531] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1442'. [ 81.309963][ T7534] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 81.401003][ T7548] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.499787][ T7568] loop2: detected capacity change from 0 to 1024 [ 81.517423][ T7568] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 81.528422][ T7568] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 81.542108][ T7568] JBD2: no valid journal superblock found [ 81.547914][ T7568] EXT4-fs (loop2): Could not load journal inode [ 81.575678][ T7568] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 81.624720][ T7600] loop5: detected capacity change from 0 to 8192 [ 81.647066][ T7544] chnl_net:caif_netlink_parms(): no params data found [ 81.721252][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.728586][ T7544] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.744843][ T7544] bridge_slave_0: entered allmulticast mode [ 81.752006][ T7544] bridge_slave_0: entered promiscuous mode [ 81.753173][ T7740] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1462'. [ 81.759565][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.774276][ T7544] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.782849][ T7544] bridge_slave_1: entered allmulticast mode [ 81.789507][ T7544] bridge_slave_1: entered promiscuous mode [ 81.818324][ T7544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.834258][ T7544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.864127][ T7544] team0: Port device team_slave_0 added [ 81.870965][ T7544] team0: Port device team_slave_1 added [ 81.914604][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.921619][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.947559][ T7544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.956302][ T7819] SELinux: failed to load policy [ 81.959165][ T7544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.970468][ T7544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.996444][ T7544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.029424][ T7544] hsr_slave_0: entered promiscuous mode [ 82.038498][ T7544] hsr_slave_1: entered promiscuous mode [ 82.044814][ T7544] debugfs: 'hsr0' already exists in 'hsr' [ 82.050673][ T7544] Cannot create hsr debugfs directory [ 82.136649][ T7544] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 82.146508][ T7544] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 82.156067][ T7544] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 82.165484][ T7544] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 82.202973][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.210102][ T7544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.217562][ T7544] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.224753][ T7544] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.256928][ T7544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.270794][ T3706] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.279512][ T3706] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.293768][ T7544] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.301067][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1474'. [ 82.310156][ T7949] dummy0: Caught tx_queue_len zero misconfig [ 82.319287][ T3674] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.326393][ T3674] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.342832][ T3706] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.349932][ T3706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.429775][ T7544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.564482][ T7544] veth0_vlan: entered promiscuous mode [ 82.573590][ T7544] veth1_vlan: entered promiscuous mode [ 82.591777][ T7544] veth0_macvtap: entered promiscuous mode [ 82.599276][ T7544] veth1_macvtap: entered promiscuous mode [ 82.612449][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.625738][ T7544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.638264][ T3706] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.652826][ T3706] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.672977][ T3706] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.684487][ T3706] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.864648][ T8019] SELinux: failed to load policy [ 82.888725][ T8021] loop9: detected capacity change from 0 to 7 [ 82.897959][ T8021] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.906492][ T8021] Buffer I/O error on dev loop9, logical block 0, async page read [ 82.914401][ T8021] loop9: unable to read partition table [ 82.920442][ T8021] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 82.920442][ T8021] ) failed (rc=-5) [ 82.970361][ T8030] sd 0:0:1:0: device reset [ 83.012537][ T8035] loop3: detected capacity change from 0 to 1024 [ 83.025531][ T8035] EXT4-fs: Ignoring removed bh option [ 83.034270][ T8035] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 83.061887][ T8035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.116639][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.173058][ T8052] loop5: detected capacity change from 0 to 512 [ 83.202842][ T8061] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1512'. [ 83.233134][ T8052] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.279759][ T8052] ext4 filesystem being mounted at /55/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.354908][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.399628][ T8080] loop3: detected capacity change from 0 to 764 [ 83.433194][ T8089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1523'. [ 83.550148][ T8109] SELinux: failed to load policy [ 83.588827][ T3717] Bluetooth: hci0: Frame reassembly failed (-84) [ 83.688559][ T8141] loop6: detected capacity change from 0 to 512 [ 83.709094][ T8141] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.726524][ T8141] ext4 filesystem being mounted at /12/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.741146][ T8141] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.1539: corrupted inode contents [ 83.768658][ T8141] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #2: comm syz.6.1539: mark_inode_dirty error [ 83.781130][ T8141] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #2: comm syz.6.1539: corrupted inode contents [ 83.793675][ T8141] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1539: mark_inode_dirty error [ 83.822814][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.827889][ T8155] loop3: detected capacity change from 0 to 512 [ 83.864389][ T8162] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 83.908065][ T8170] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 83.908065][ T8170] program syz.6.1549 not setting count and/or reply_len properly [ 84.008091][ T8184] random: crng reseeded on system resumption [ 84.016497][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.026056][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.682273][ T8238] loop3: detected capacity change from 0 to 512 [ 84.692498][ T8238] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 84.700672][ T8238] EXT4-fs (loop3): orphan cleanup on readonly fs [ 84.708392][ T8238] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #16: comm syz.3.1568: corrupted inode contents [ 84.720717][ T8238] EXT4-fs (loop3): Remounting filesystem read-only [ 84.727499][ T8238] EXT4-fs (loop3): 1 truncate cleaned up [ 84.733288][ T3678] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.743875][ T3678] __quota_error: 328 callbacks suppressed [ 84.743891][ T3678] Quota error (device loop3): write_blk: dquota write failed [ 84.757017][ T3678] Quota error (device loop3): remove_free_dqentry: Can't write block (5) with free entries [ 84.767111][ T3678] EXT4-fs (loop3): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 84.777653][ T3678] Quota error (device loop3): write_blk: dquota write failed [ 84.785075][ T3678] Quota error (device loop3): free_dqentry: Can't move quota data block (5) to free list [ 84.795164][ T3678] EXT4-fs (loop3): Quota write (off=8, len=24) cancelled because transaction is not started [ 84.805351][ T3678] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 84.814242][ T3678] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 84.824553][ T8238] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 84.927817][ T29] audit: type=1400 audit(1759972168.905:2011): avc: denied { map } for pid=8251 comm="syz.6.1573" path="socket:[19457]" dev="sockfs" ino=19457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.952677][ T29] audit: type=1400 audit(1759972168.905:2012): avc: denied { read } for pid=8251 comm="syz.6.1573" path="socket:[19457]" dev="sockfs" ino=19457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 84.976222][ T29] audit: type=1400 audit(1759972168.905:2013): avc: denied { accept } for pid=8251 comm="syz.6.1573" path="socket:[19457]" dev="sockfs" ino=19457 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 85.025531][ T8257] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1574'. [ 85.151763][ T29] audit: type=1326 audit(1759972169.135:2014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8275 comm="syz.6.1584" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 85.445759][ T8288] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 85.445759][ T8288] program syz.6.1590 not setting count and/or reply_len properly [ 85.469846][ T8286] loop0: detected capacity change from 0 to 8192 [ 85.483159][ T8291] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 85.531834][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.593791][ T9] IPVS: starting estimator thread 0... [ 85.604702][ T8295] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 85.633766][ T8316] xt_l2tp: missing protocol rule (udp|l2tpip) [ 85.642052][ T4297] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 85.648377][ T3532] Bluetooth: hci0: command 0x1003 tx timeout [ 85.659952][ T8318] loop0: detected capacity change from 0 to 1024 [ 85.691494][ T8314] IPVS: using max 2256 ests per chain, 112800 per kthread [ 85.715905][ T8332] netlink: 'syz.3.1602': attribute type 1 has an invalid length. [ 85.737717][ T8332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 85.750633][ T8332] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 85.904318][ T8377] netlink: 19 bytes leftover after parsing attributes in process `syz.3.1606'. [ 85.981771][ T8390] sd 0:0:1:0: device reset [ 86.215058][ T8436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.224416][ T8436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.369697][ T8473] 9pnet: Could not find request transport: f [ 86.568342][ T8510] rdma_op ffff888135295980 conn xmit_rdma 0000000000000000 [ 86.597190][ T8523] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 86.644744][ T8529] loop2: detected capacity change from 0 to 512 [ 86.664630][ T8529] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1651: bg 0: block 248: padding at end of block bitmap is not set [ 86.679586][ T8529] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1651: Failed to acquire dquot type 1 [ 86.692120][ T8529] EXT4-fs (loop2): 1 truncate cleaned up [ 86.700084][ T8529] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.713428][ T8529] ext4 filesystem being mounted at /290/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.736279][ T8529] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1651: Failed to acquire dquot type 1 [ 86.767785][ T8544] loop6: detected capacity change from 0 to 512 [ 86.774818][ T8529] syz.2.1651 (8529) used greatest stack depth: 9120 bytes left [ 86.793829][ T8544] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.802206][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.807569][ T8544] ext4 filesystem being mounted at /45/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.826038][ T3717] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:58: Failed to release dquot type 1 [ 86.851079][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.890691][ T3717] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.904490][ T3717] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 86.914479][ T8569] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 86.923851][ T8558] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.941603][ T3717] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 87.056450][ T8589] sch_tbf: peakrate 7 is lower than or equals to rate 19 ! [ 87.093114][ T8593] loop3: detected capacity change from 0 to 1024 [ 87.113039][ T8593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 87.126307][ T8593] ext4 filesystem being mounted at /359/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.143440][ T8604] loop2: detected capacity change from 0 to 1024 [ 87.160409][ T8604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.184931][ T8604] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 18: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 87.222417][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.239591][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 87.469843][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 87.479090][ T8659] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1696'. [ 87.511604][ T8667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1695'. [ 87.529061][ T8667] vxlan0: entered promiscuous mode [ 87.624609][ T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0) [ 87.645549][ T8681] loop3: detected capacity change from 0 to 1024 [ 87.652596][ T8681] EXT4-fs: Ignoring removed nomblk_io_submit option [ 87.681493][ T8681] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002] [ 87.691295][ T8681] System zones: 0-1, 3-12 [ 87.696501][ T8681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.711879][ T8681] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1703: bg 0: block 88: padding at end of block bitmap is not set [ 87.739335][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.780208][ T8700] netlink: 'syz.3.1710': attribute type 29 has an invalid length. [ 87.788998][ T8700] netlink: 'syz.3.1710': attribute type 29 has an invalid length. [ 87.797654][ T8700] netlink: 492 bytes leftover after parsing attributes in process `syz.3.1710'. [ 88.230174][ T8751] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 88.230174][ T8751] program syz.3.1731 not setting count and/or reply_len properly [ 88.318939][ T8766] loop3: detected capacity change from 0 to 2048 [ 88.336870][ T8766] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.371546][ T8776] loop5: detected capacity change from 0 to 164 [ 88.379175][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.390349][ T8776] syz.5.1742: attempt to access beyond end of device [ 88.390349][ T8776] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 88.404846][ T8776] syz.5.1742: attempt to access beyond end of device [ 88.404846][ T8776] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 88.407234][ T8781] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1743'. [ 88.468337][ T8787] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 88.468337][ T8787] program syz.0.1745 not setting count and/or reply_len properly [ 88.508187][ T8793] loop3: detected capacity change from 0 to 512 [ 88.525019][ T8793] EXT4-fs: Ignoring removed nobh option [ 88.543092][ T8793] EXT4-fs error (device loop3): ext4_do_update_inode:5624: inode #3: comm syz.3.1747: corrupted inode contents [ 88.562071][ T8793] EXT4-fs (loop3): Remounting filesystem read-only [ 88.572720][ T8793] EXT4-fs (loop3): 1 truncate cleaned up [ 88.580980][ T8793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.597833][ T8558] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.608400][ T8558] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.635799][ T8793] ext4 filesystem being mounted at /383/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.651531][ T8806] netlink: 'syz.5.1752': attribute type 1 has an invalid length. [ 88.659332][ T8806] netlink: 'syz.5.1752': attribute type 2 has an invalid length. [ 88.672067][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.731900][ T8558] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.742358][ T8558] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.805268][ T8558] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.815811][ T8558] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 88.879480][ T3692] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.887886][ T3692] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 88.908598][ T3692] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.916988][ T3692] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 88.954667][ T8860] veth0: entered promiscuous mode [ 88.961669][ T3692] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.969996][ T3692] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 88.979689][ T8860] veth0: left promiscuous mode [ 88.984697][ T3692] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 88.984729][ T3692] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 89.021117][ T8862] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1766'. [ 89.052651][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 89.400259][ T8912] vlan2: entered allmulticast mode [ 89.413658][ T8918] netlink: 'syz.3.1790': attribute type 3 has an invalid length. [ 89.976740][ T8980] netlink: 'syz.5.1816': attribute type 1 has an invalid length. [ 90.124937][ T9000] __nla_validate_parse: 7 callbacks suppressed [ 90.124958][ T9000] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1822'. [ 90.325121][ T9025] loop5: detected capacity change from 0 to 512 [ 90.338071][ T9025] EXT4-fs: inline encryption not supported [ 90.344324][ T9025] EXT4-fs: inline encryption not supported [ 90.351001][ T9025] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 90.367791][ T9025] EXT4-fs (loop5): 1 truncate cleaned up [ 90.379267][ T9025] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.553909][ T29] kauditd_printk_skb: 236 callbacks suppressed [ 90.553926][ T29] audit: type=1400 audit(1759972174.535:2244): avc: denied { connect } for pid=9035 comm="syz.3.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.582650][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.626283][ T29] audit: type=1326 audit(1759972174.605:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 90.649901][ T29] audit: type=1326 audit(1759972174.605:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 90.686517][ T29] audit: type=1326 audit(1759972174.655:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 90.697740][ T9047] loop3: detected capacity change from 0 to 512 [ 90.710169][ T29] audit: type=1326 audit(1759972174.655:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 90.710209][ T29] audit: type=1326 audit(1759972174.655:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 90.743320][ T9047] EXT4-fs (loop3): 1 orphan inode deleted [ 90.763421][ T29] audit: type=1326 audit(1759972174.655:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 90.769632][ T9047] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.792655][ T29] audit: type=1326 audit(1759972174.655:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9041 comm="syz.3.1837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 90.842664][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.861443][ T29] audit: type=1326 audit(1759972174.825:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.5.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 90.884962][ T29] audit: type=1326 audit(1759972174.825:2253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9043 comm="syz.5.1838" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 90.938591][ T9059] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 90.954391][ T9059] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 90.962489][ T9055] IPv6: NLM_F_CREATE should be specified when creating new route [ 91.073703][ T9078] loop5: detected capacity change from 0 to 512 [ 91.102859][ T9078] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 91.111091][ T9078] EXT4-fs (loop5): orphan cleanup on readonly fs [ 91.119364][ T9078] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #16: comm syz.5.1848: corrupted inode contents [ 91.131887][ T9078] EXT4-fs (loop5): Remounting filesystem read-only [ 91.138670][ T9078] EXT4-fs (loop5): 1 truncate cleaned up [ 91.144763][ T3717] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.155391][ T3717] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 91.167973][ T3717] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 91.179153][ T9078] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.204918][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.522148][ T9142] random: crng reseeded on system resumption [ 92.415610][ T9156] 9pnet_fd: p9_fd_create_tcp (9156): problem connecting socket to 127.0.0.1 [ 92.434036][ T9217] tipc: Started in network mode [ 92.438986][ T9217] tipc: Node identity ac14140f, cluster identity 4711 [ 92.459442][ T9217] tipc: New replicast peer: 255.255.255.255 [ 92.465859][ T9217] tipc: Enabled bearer , priority 10 [ 92.597417][ T9246] macvtap0: refused to change device tx_queue_len [ 92.741492][ T9270] ip6tnl0: Caught tx_queue_len zero misconfig [ 92.767495][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1924'. [ 92.846934][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 92.855948][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 92.922130][ T9292] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1932'. [ 92.931082][ T9292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1932'. [ 93.070305][ T9327] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1942'. [ 93.240929][ T9340] netlink: 24 bytes leftover after parsing attributes in process `+}[@'. [ 93.249554][ T9340] IPVS: Error connecting to the multicast addr [ 93.395843][ T9358] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1953'. [ 93.469999][ T9366] netlink: 'syz.2.1956': attribute type 2 has an invalid length. [ 93.477819][ T9366] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1956'. [ 93.581577][ T10] tipc: Node number set to 2886997007 [ 93.657037][ T9398] netlink: 'syz.2.1970': attribute type 3 has an invalid length. [ 93.685739][ T9400] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 93.857800][ T9430] loop3: detected capacity change from 0 to 512 [ 93.875813][ T9430] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 93.898815][ T9430] EXT4-fs (loop3): 1 truncate cleaned up [ 93.906794][ T9430] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.962695][ T9440] netlink: 'syz.6.1987': attribute type 5 has an invalid length. [ 94.005177][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.044931][ T9452] loop5: detected capacity change from 0 to 1024 [ 94.077593][ T9452] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.096192][ T9464] 9pnet_fd: Insufficient options for proto=fd [ 94.144628][ T9452] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.1992: Allocating blocks 385-513 which overlap fs metadata [ 94.184199][ T9452] EXT4-fs (loop5): pa ffff88810726e0e0: logic 16, phys. 129, len 24 [ 94.192277][ T9452] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 94.220528][ T9471] lo: Caught tx_queue_len zero misconfig [ 94.250009][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.325939][ T9477] loop6: detected capacity change from 0 to 8192 [ 94.538127][ T9495] loop5: detected capacity change from 0 to 2048 [ 94.553891][ T9495] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 94.586291][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 94.828175][ T9514] netlink: 'syz.5.2013': attribute type 3 has an invalid length. [ 95.155330][ T9548] tipc: Started in network mode [ 95.160322][ T9548] tipc: Node identity ac14140f, cluster identity 4711 [ 95.167483][ T9548] tipc: New replicast peer: 255.255.255.255 [ 95.173769][ T9548] tipc: Enabled bearer , priority 10 [ 95.227364][ T9552] loop5: detected capacity change from 0 to 8192 [ 95.323292][ T9567] loop5: detected capacity change from 0 to 1024 [ 95.342061][ T9567] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 95.354843][ T9567] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.545180][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 95.663377][ T9589] __nla_validate_parse: 2 callbacks suppressed [ 95.663396][ T9589] netlink: 5452 bytes leftover after parsing attributes in process `syz.5.2038'. [ 95.726536][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 95.726555][ T29] audit: type=1326 audit(1759972179.705:2472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.800555][ T29] audit: type=1326 audit(1759972179.705:2473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.824095][ T29] audit: type=1326 audit(1759972179.705:2474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.847642][ T29] audit: type=1326 audit(1759972179.705:2475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.871197][ T29] audit: type=1326 audit(1759972179.705:2476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.894874][ T29] audit: type=1326 audit(1759972179.705:2477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.918472][ T29] audit: type=1326 audit(1759972179.705:2478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.942006][ T29] audit: type=1326 audit(1759972179.715:2479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.965486][ T29] audit: type=1326 audit(1759972179.715:2480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 95.981478][ T9591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2039'. [ 95.988909][ T29] audit: type=1326 audit(1759972179.735:2481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9596 comm="syz.6.2042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 96.030353][ T9604] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 96.037065][ T9604] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.044741][ T9604] vhci_hcd vhci_hcd.0: Device attached [ 96.050947][ T9613] netdevsim netdevsim0: Direct firmware load for ./file0/file1 failed with error -2 [ 96.059565][ T9603] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 96.066975][ T9603] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.074601][ T9603] vhci_hcd vhci_hcd.0: Device attached [ 96.075045][ T9606] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(9) [ 96.086826][ T9606] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.094278][ T9606] vhci_hcd vhci_hcd.0: Device attached [ 96.101431][ T9611] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(12) [ 96.108113][ T9611] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 96.115732][ T9611] vhci_hcd vhci_hcd.0: Device attached [ 96.141607][ T9604] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(5) [ 96.148187][ T9604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 96.155771][ T9604] vhci_hcd vhci_hcd.0: Device attached [ 96.167090][ T9616] vhci_hcd: connection closed [ 96.167122][ T9605] vhci_hcd: connection closed [ 96.169763][ T9621] vhci_hcd: connection closed [ 96.171899][ T9609] vhci_hcd: connection closed [ 96.181556][ T9614] vhci_hcd: connection closed [ 96.192203][ T3674] vhci_hcd: stop threads [ 96.201292][ T3674] vhci_hcd: release socket [ 96.205849][ T3674] vhci_hcd: disconnect device [ 96.228725][ T3674] vhci_hcd: stop threads [ 96.233100][ T3674] vhci_hcd: release socket [ 96.237567][ T3674] vhci_hcd: disconnect device [ 96.242583][ T3674] vhci_hcd: stop threads [ 96.246887][ T3674] vhci_hcd: release socket [ 96.251393][ T3674] vhci_hcd: disconnect device [ 96.263684][ T3674] vhci_hcd: stop threads [ 96.267992][ T3674] vhci_hcd: release socket [ 96.272634][ T3674] vhci_hcd: disconnect device [ 96.287687][ T3674] vhci_hcd: stop threads [ 96.291449][ T10] usb 11-1: new low-speed USB device number 2 using vhci_hcd [ 96.292038][ T3674] vhci_hcd: release socket [ 96.303958][ T3674] vhci_hcd: disconnect device [ 96.308864][ T10] usb 11-1: enqueue for inactive port 0 [ 96.314718][ T1037] tipc: Node number set to 2886997007 [ 96.326225][ T10] usb 11-1: enqueue for inactive port 0 [ 96.350888][ T10] usb 11-1: enqueue for inactive port 0 [ 96.358565][ T9647] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2057'. [ 96.443934][ T10] vhci_hcd: vhci_device speed not set [ 96.588676][ T9680] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.596856][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.604732][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.613088][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.620850][ T1037] rtc_cmos 00:00: Alarms can be up to one day in the future [ 96.628478][ T1037] rtc rtc0: __rtc_set_alarm: err=-22 [ 96.693110][ T9691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.701210][ T9691] team0: Port device bond0 added [ 96.883602][ T9724] bond0: Caught tx_queue_len zero misconfig [ 97.234734][ T9760] veth0: entered promiscuous mode [ 97.241336][ T9760] veth0: left promiscuous mode [ 97.298944][ T9769] loop6: detected capacity change from 0 to 2048 [ 97.313708][ T9769] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.446500][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.535838][ T9803] hub 9-0:1.0: USB hub found [ 97.543313][ T9803] hub 9-0:1.0: 8 ports detected [ 97.580539][ T9812] vlan2: entered allmulticast mode [ 97.640068][ T9827] loop6: detected capacity change from 0 to 128 [ 97.649156][ T9827] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.662699][ T9827] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.697522][ T9827] EXT4-fs (loop6): shut down requested (2) [ 97.713675][ T7544] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.022682][ T9870] loop6: detected capacity change from 0 to 1024 [ 98.029830][ T9870] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 98.040860][ T9870] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 98.051684][ T9870] JBD2: no valid journal superblock found [ 98.057492][ T9870] EXT4-fs (loop6): Could not load journal inode [ 98.282366][ T9904] bridge0: entered promiscuous mode [ 98.287864][ T9904] macsec1: entered promiscuous mode [ 98.294832][ T9904] bridge0: port 3(macsec1) entered blocking state [ 98.301418][ T9904] bridge0: port 3(macsec1) entered disabled state [ 98.308104][ T9904] macsec1: entered allmulticast mode [ 98.313526][ T9904] bridge0: entered allmulticast mode [ 98.319888][ T9904] macsec1: left allmulticast mode [ 98.325062][ T9904] bridge0: left allmulticast mode [ 98.330813][ T9904] bridge0: left promiscuous mode [ 98.371087][ T9910] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.442466][ T9910] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.505644][ T9910] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.583068][ T9910] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.696540][ T3696] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.708010][ T3696] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.732234][ T3696] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.755830][ T3696] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.776642][ T9958] loop6: detected capacity change from 0 to 1024 [ 98.783848][ T9958] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.812162][ T9958] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.866574][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2179'. [ 98.868650][ T9971] syzkaller1: entered promiscuous mode [ 98.881025][ T9971] syzkaller1: entered allmulticast mode [ 98.892909][ T9971] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 324 [ 98.905718][ T9975] vxlan0: entered promiscuous mode [ 98.931101][ T3696] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.950763][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.962284][ T3696] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.987588][ T3696] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.020798][ T3696] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.067290][ T9989] loop3: detected capacity change from 0 to 512 [ 99.075828][ T9989] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2185: casefold flag without casefold feature [ 99.089200][ T9989] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2185: couldn't read orphan inode 15 (err -117) [ 99.111880][ T9989] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.411134][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.595025][T10058] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2207'. [ 99.677352][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2212'. [ 100.902304][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 100.902324][ T29] audit: type=1326 audit(1759972184.885:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 100.939885][ T29] audit: type=1326 audit(1759972184.885:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 100.963504][ T29] audit: type=1326 audit(1759972184.915:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 100.987189][ T29] audit: type=1326 audit(1759972184.915:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 101.010718][ T29] audit: type=1326 audit(1759972184.915:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 101.028074][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a7e2e00: rx timeout, send abort [ 101.034353][ T29] audit: type=1326 audit(1759972184.915:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 101.065987][ T29] audit: type=1326 audit(1759972184.915:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 101.089577][ T29] audit: type=1326 audit(1759972184.915:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 101.113073][ T29] audit: type=1326 audit(1759972184.915:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 101.136867][ T29] audit: type=1326 audit(1759972184.915:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10269 comm="syz.5.2239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 101.469497][T10327] program syz.0.2264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.528255][T10336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2270'. [ 101.542530][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811a7e2e00: abort rx timeout. Force session deactivation [ 101.820068][T10366] loop6: detected capacity change from 0 to 512 [ 101.847048][T10366] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.869808][T10366] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.942310][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.970208][T10374] loop6: detected capacity change from 0 to 512 [ 101.977502][T10374] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 101.990299][T10374] EXT4-fs (loop6): 1 truncate cleaned up [ 101.996582][T10374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.021054][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.040702][T10384] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2285'. [ 102.169859][T10401] netlink: 'syz.5.2293': attribute type 5 has an invalid length. [ 102.250860][T10415] netlink: 'syz.5.2298': attribute type 12 has an invalid length. [ 102.292398][T10423] netlink: 'syz.5.2302': attribute type 1 has an invalid length. [ 102.312939][T10423] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.330188][T10423] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 102.340139][T10461] netem: incorrect gi model size [ 102.345211][T10461] netem: change failed [ 102.525770][T10483] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2313'. [ 102.551433][T10483] batadv1: entered promiscuous mode [ 102.556857][T10483] batadv1: entered allmulticast mode [ 102.713517][ T3696] Bluetooth: hci0: Frame reassembly failed (-84) [ 102.825309][T10546] netlink: 'syz.0.2331': attribute type 3 has an invalid length. [ 103.021657][T10571] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 103.051861][T10577] netlink: 'syz.5.2342': attribute type 8 has an invalid length. [ 103.059647][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2342'. [ 103.074127][T10577] bond0: entered promiscuous mode [ 103.079362][T10577] bond_slave_0: entered promiscuous mode [ 103.085313][T10577] bond_slave_1: entered promiscuous mode [ 103.092506][T10577] veth1_to_bridge: entered promiscuous mode [ 103.098889][T10577] ip6gretap0: entered promiscuous mode [ 103.105433][T10577] hsr1: entered promiscuous mode [ 103.213485][T10590] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.265072][T10590] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.324310][T10590] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.394419][T10590] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 103.461324][ T3696] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.476980][ T3696] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.498338][ T3696] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.515885][ T3696] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.650044][T10615] futex_wake_op: syz.5.2349 tries to shift op by -1; fix this program [ 104.160229][T10621] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2351'. [ 104.761501][ T3532] Bluetooth: hci0: command 0x1003 tx timeout [ 104.767640][ T4297] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.867598][T10710] loop3: detected capacity change from 0 to 512 [ 104.894196][T10710] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.2387: bad orphan inode 11862016 [ 104.906517][T10710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 104.919487][T10710] ext4 filesystem being mounted at /501/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.961251][ T3322] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 105.143637][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2405'. [ 105.193313][T10769] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2408'. [ 105.202813][T10769] IPVS: Error connecting to the multicast addr [ 105.354057][T10793] netlink: 'syz.6.2415': attribute type 1 has an invalid length. [ 105.362046][T10793] netlink: 'syz.6.2415': attribute type 4 has an invalid length. [ 105.369783][T10793] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2415'. [ 105.509417][T10824] loop6: detected capacity change from 0 to 512 [ 105.517869][T10824] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2424: casefold flag without casefold feature [ 105.531816][T10824] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2424: couldn't read orphan inode 15 (err -117) [ 105.544269][T10824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.687072][T10832] loop3: detected capacity change from 0 to 1024 [ 105.710653][T10832] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.729402][T10832] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #11: comm syz.3.2427: iget: bogus i_mode (1) [ 105.742411][T10832] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2427: couldn't read orphan inode 11 (err -117) [ 105.755243][T10832] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.769794][T10832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.783514][T10843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 105.793977][T10843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 105.804320][T10843] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.829103][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.848031][T10851] loop5: detected capacity change from 0 to 512 [ 105.868508][T10843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 105.878925][T10843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 105.889405][T10843] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.905970][T10851] ext4 filesystem being mounted at /230/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 105.957270][T10843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 105.968055][T10843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 105.978683][T10843] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.018953][T10877] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2438'. [ 106.031983][T10878] loop5: detected capacity change from 0 to 1024 [ 106.052407][T10878] EXT4-fs: Ignoring removed orlov option [ 106.067194][T10843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 256 - 0 [ 106.077640][T10843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 8472 - 0 [ 106.087986][T10843] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.107372][T10889] ip6gre0: Caught tx_queue_len zero misconfig [ 106.113968][T10889] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 106.123013][T10878] EXT4-fs mount: 2 callbacks suppressed [ 106.123028][T10878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.168073][ T3678] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.176502][ T3678] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 106.184682][ T3678] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.193875][T10878] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2439'. [ 106.223030][ T3717] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.231460][ T3717] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 106.239615][ T3717] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.252996][ T3717] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.261255][ T3717] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 106.269467][ T3717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.277905][ T3717] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.286154][ T3717] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 106.294346][ T3717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.320273][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 106.320292][ T29] audit: type=1326 audit(1759972190.295:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.351854][ T29] audit: type=1326 audit(1759972190.295:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.353150][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.398765][ T29] audit: type=1326 audit(1759972190.365:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.422439][ T29] audit: type=1326 audit(1759972190.365:2850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.445990][ T29] audit: type=1326 audit(1759972190.365:2851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.469614][ T29] audit: type=1326 audit(1759972190.365:2852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.493162][ T29] audit: type=1326 audit(1759972190.365:2853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.516701][ T29] audit: type=1326 audit(1759972190.365:2854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.540472][ T29] audit: type=1326 audit(1759972190.365:2855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.564145][ T29] audit: type=1326 audit(1759972190.365:2856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10901 comm="syz.6.2446" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39a7caeec9 code=0x7ffc0000 [ 106.606511][T10918] loop6: detected capacity change from 0 to 128 [ 106.629946][T10918] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 106.645790][T10927] 9pnet_fd: Insufficient options for proto=fd [ 106.653273][T10918] ext4 filesystem being mounted at /171/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.692239][ T7544] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.750923][T10945] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 106.761012][T10945] netdevsim netdevsim6 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 106.868570][T10945] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 106.878800][T10945] netdevsim netdevsim6 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 106.934632][T10945] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 106.944679][T10945] netdevsim netdevsim6 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 107.014909][T10945] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 107.025200][T10945] netdevsim netdevsim6 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 107.114902][T11011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2474'. [ 107.130697][ T3674] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.139075][ T3674] netdevsim netdevsim6 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.200663][ T3674] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.209081][ T3674] netdevsim netdevsim6 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.230706][ T3674] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.239169][ T3674] netdevsim netdevsim6 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.267970][ T3674] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 107.276378][ T3674] netdevsim netdevsim6 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 107.324814][T11042] veth1_virt_wifi: Caught tx_queue_len zero misconfig [ 107.331689][T11042] netlink: 'syz.0.2478': attribute type 6 has an invalid length. [ 107.459796][T11066] loop6: detected capacity change from 0 to 512 [ 107.493814][T11066] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.513227][T11066] ext4 filesystem being mounted at /175/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 107.556580][T11066] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz.6.2484: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 107.596759][T11066] EXT4-fs (loop6): Remounting filesystem read-only [ 107.618450][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.703032][T11099] netlink: 'syz.0.2491': attribute type 10 has an invalid length. [ 107.710940][T11099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2491'. [ 107.735835][T11099] dummy0: entered promiscuous mode [ 107.752965][T11099] bond0: (slave dummy0): Releasing backup interface [ 107.810769][T11113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 107.912056][T11132] netlink: 240 bytes leftover after parsing attributes in process `syz.6.2495'. [ 108.095273][T11158] ip6gre0: Caught tx_queue_len zero misconfig [ 108.113011][T11158] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 108.564804][T11211] 9pnet_fd: Insufficient options for proto=fd [ 108.671593][T11219] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2519'. [ 108.976348][T11275] loop6: detected capacity change from 0 to 2048 [ 108.994159][T11275] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 109.013186][T11275] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.042548][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 109.126283][T11292] hub 8-0:1.0: USB hub found [ 109.141198][T11292] hub 8-0:1.0: 8 ports detected [ 109.195908][T11306] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.205757][T11306] netdevsim netdevsim2 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 109.215511][T11306] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.274611][T11306] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.284722][T11306] netdevsim netdevsim2 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 109.294602][T11306] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.357078][T11348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2560'. [ 109.402847][T11306] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.412807][T11306] netdevsim netdevsim2 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 109.422607][T11306] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.489251][T11359] loop5: detected capacity change from 0 to 1024 [ 109.496941][T11359] EXT4-fs: Ignoring removed nobh option [ 109.498426][T11306] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.502963][T11359] EXT4-fs: Ignoring removed nobh option [ 109.512394][T11306] netdevsim netdevsim2 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 109.512435][T11306] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.519883][T11359] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 109.538975][T11357] loop6: detected capacity change from 0 to 512 [ 109.547914][T11359] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.2562: inode #4294967295: comm syz.5.2562: iget: illegal inode # [ 109.568075][T11357] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 109.569041][T11359] EXT4-fs (loop5): no journal found [ 109.581997][T11359] EXT4-fs (loop5): can't get journal size [ 109.589006][T11359] EXT4-fs (loop5): failed to initialize system zone (-22) [ 109.596417][T11359] EXT4-fs (loop5): mount failed [ 109.609314][T11357] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.631604][T11357] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.647112][T11357] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.959376][T11399] netlink: 'syz.5.2576': attribute type 1 has an invalid length. [ 109.978927][T11399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.007899][T11399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 110.015419][T11399] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 110.027028][T11399] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 110.099363][T11446] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.137775][T11452] netlink: 'syz.5.2581': attribute type 4 has an invalid length. [ 110.147863][T11452] netlink: 'syz.5.2581': attribute type 4 has an invalid length. [ 110.208374][T11462] loop5: detected capacity change from 0 to 256 [ 110.219286][ T3717] Bluetooth: hci0: Frame reassembly failed (-84) [ 110.283079][T11478] loop5: detected capacity change from 0 to 512 [ 110.293902][T11478] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.306941][T11478] ext4 filesystem being mounted at /250/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.330829][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.349146][T11486] netem: incorrect gi model size [ 110.354199][T11486] netem: change failed [ 110.520240][ T3414] Process accounting resumed [ 110.549986][T11520] loop5: detected capacity change from 0 to 1024 [ 110.563876][T11520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.577323][T11520] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 110.604852][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.618470][ T3717] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.626943][ T3717] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 110.635094][ T3717] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.649257][ T3717] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.657643][ T3717] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 110.665850][ T3717] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.676156][T11537] netlink: 'syz.5.2610': attribute type 13 has an invalid length. [ 110.687828][T11537] gretap0: refused to change device tx_queue_len [ 110.694631][T11537] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 110.714186][ T3717] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.722525][ T3717] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 110.730643][ T3717] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.765405][ T3717] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.773735][ T3717] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 110.781895][ T3717] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.203164][T11569] loop9: detected capacity change from 0 to 7 [ 111.226077][T11569] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.241622][T11569] Buffer I/O error on dev loop9, logical block 0, async page read [ 111.249530][T11569] loop9: unable to read partition table [ 111.268178][T11569] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 111.268178][T11569] ) failed (rc=-5) [ 111.351207][T11581] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.464243][T11581] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.515233][T11581] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.564741][T11581] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.626787][ T3674] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.644991][T11612] loop6: detected capacity change from 0 to 512 [ 111.662969][ T3692] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.685638][ T3692] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.721405][ T3692] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.732348][T11612] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2632: bad orphan inode 11862016 [ 111.763949][T11612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 111.805055][T11612] ext4 filesystem being mounted at /219/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.822713][ T29] kauditd_printk_skb: 197 callbacks suppressed [ 111.822727][ T29] audit: type=1326 audit(1759972195.805:3054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 111.932139][ T29] audit: type=1326 audit(1759972195.835:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 111.955860][ T29] audit: type=1326 audit(1759972195.835:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 111.979640][ T29] audit: type=1326 audit(1759972195.835:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11629 comm="syz.5.2636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe08a59eec9 code=0x7ffc0000 [ 112.005087][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 112.046375][ T29] audit: type=1326 audit(1759972196.025:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 112.070008][ T29] audit: type=1326 audit(1759972196.025:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 112.151582][ T29] audit: type=1326 audit(1759972196.025:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 112.175190][ T29] audit: type=1326 audit(1759972196.025:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11643 comm="syz.2.2641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 112.245979][ T29] audit: type=1400 audit(1759972196.225:3062): avc: denied { unlink } for pid=3318 comm="syz-executor" name="file4" dev="tmpfs" ino=2930 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 112.277074][T11660] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.287883][ T3532] Bluetooth: hci0: command 0x1003 tx timeout [ 112.303096][ T4297] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 112.342619][T11660] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.412488][T11660] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.482087][T11660] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.492177][ T29] audit: type=1326 audit(1759972196.455:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11675 comm="syz.3.2652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 112.689369][ T3407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=3407 comm=kworker/0:3 [ 112.708343][T11692] 9pnet: p9_errstr2errno: server reported unknown error 184467 [ 113.169131][T11737] SELinux: failed to load policy [ 113.421044][ T3674] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.442055][ T3674] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.468403][ T3674] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.487128][ T3674] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.603962][T11808] loop5: detected capacity change from 0 to 512 [ 113.624110][T11808] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.2673: bad orphan inode 11862016 [ 113.644882][T11808] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 113.657945][T11808] ext4 filesystem being mounted at /278/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.820759][T11826] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #19: comm syz.5.2673: corrupted inode contents [ 113.859295][T11826] EXT4-fs error (device loop5): ext4_dirty_inode:6509: inode #19: comm syz.5.2673: mark_inode_dirty error [ 113.887776][T11826] EXT4-fs error (device loop5): ext4_do_update_inode:5624: inode #19: comm syz.5.2673: corrupted inode contents [ 113.901591][T11826] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2996: inode #19: comm syz.5.2673: mark_inode_dirty error [ 113.919250][T11826] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2999: inode #19: comm syz.5.2673: mark inode dirty (error -117) [ 113.936411][T11826] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 113.995823][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 114.400749][T11889] loop5: detected capacity change from 0 to 512 [ 114.433210][T11889] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.458933][T11889] ext4 filesystem being mounted at /281/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 114.504293][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.991038][T11938] loop3: detected capacity change from 0 to 128 [ 115.000310][T11938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 115.008386][T11938] FAT-fs (loop3): Filesystem has been set read-only [ 115.017914][T11938] syz.3.2699: attempt to access beyond end of device [ 115.017914][T11938] loop3: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 115.031897][T11938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 115.039729][T11938] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 115.048035][T11938] syz.3.2699: attempt to access beyond end of device [ 115.048035][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.062306][T11938] syz.3.2699: attempt to access beyond end of device [ 115.062306][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.075961][T11938] syz.3.2699: attempt to access beyond end of device [ 115.075961][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.089778][T11938] syz.3.2699: attempt to access beyond end of device [ 115.089778][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.104179][T11938] syz.3.2699: attempt to access beyond end of device [ 115.104179][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.117692][T11938] syz.3.2699: attempt to access beyond end of device [ 115.117692][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.131502][T11938] syz.3.2699: attempt to access beyond end of device [ 115.131502][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.144955][T11938] syz.3.2699: attempt to access beyond end of device [ 115.144955][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.159055][T11938] syz.3.2699: attempt to access beyond end of device [ 115.159055][T11938] loop3: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 115.791956][T11967] netlink: 'syz.2.2712': attribute type 21 has an invalid length. [ 115.819761][T11967] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2712'. [ 115.960602][T11975] netlink: 5420 bytes leftover after parsing attributes in process `syz.2.2716'. [ 116.037531][T11986] loop3: detected capacity change from 0 to 1024 [ 116.050883][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 116.051056][T11986] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 116.060258][T11987] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2721'. [ 116.070881][T11986] EXT4-fs (loop3): group descriptors corrupted! [ 116.080080][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 116.095231][T11987] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2721'. [ 116.106926][T11987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2721'. [ 116.122462][T11992] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2722'. [ 116.131840][T11992] IPVS: Error connecting to the multicast addr [ 116.179052][T11994] netlink: 'syz.2.2723': attribute type 13 has an invalid length. [ 116.226533][T11994] gretap0: refused to change device tx_queue_len [ 116.262905][T11994] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 116.457132][ T3674] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 116.466090][ T3674] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 116.480522][T12010] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 116.497355][ T3674] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 116.662010][T12032] pim6reg: entered allmulticast mode [ 116.700622][T12032] pim6reg: left allmulticast mode [ 117.000336][T12051] @: renamed from vlan0 (while UP) [ 117.156522][T12058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2757'. [ 117.166909][ T29] kauditd_printk_skb: 156 callbacks suppressed [ 117.166922][ T29] audit: type=1326 audit(1759972201.145:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.196715][ T29] audit: type=1326 audit(1759972201.145:3221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.270340][T12063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2748'. [ 117.271504][ T29] audit: type=1326 audit(1759972201.205:3222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.302992][ T29] audit: type=1326 audit(1759972201.205:3223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.308179][T12063] xfrm1: entered promiscuous mode [ 117.326591][ T29] audit: type=1326 audit(1759972201.205:3224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.326631][ T29] audit: type=1326 audit(1759972201.215:3225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.326694][ T29] audit: type=1326 audit(1759972201.215:3226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.331793][T12063] xfrm1: entered allmulticast mode [ 117.407422][ T29] audit: type=1326 audit(1759972201.215:3227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.430944][ T29] audit: type=1326 audit(1759972201.215:3228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 117.454559][ T29] audit: type=1326 audit(1759972201.215:3229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12059 comm="syz.3.2747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc62610eec9 code=0x7ffc0000 [ 118.012653][T12010] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.022530][T12010] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.074788][T12085] loop6: detected capacity change from 0 to 512 [ 118.093050][T12010] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.102962][T12010] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.129661][T12085] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.2756: bad orphan inode 11862016 [ 118.134646][T12092] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.140900][ T3717] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 118.162005][T12085] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 118.181484][T12085] ext4 filesystem being mounted at /221/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.182302][T12010] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 118.201956][T12010] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 118.269026][ T3674] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.277358][ T3674] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.324745][T12107] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #19: comm syz.6.2756: corrupted inode contents [ 118.350322][T12107] EXT4-fs error (device loop6): ext4_dirty_inode:6509: inode #19: comm syz.6.2756: mark_inode_dirty error [ 118.361785][ T3674] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.370023][ T3674] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.386783][T12107] EXT4-fs error (device loop6): ext4_do_update_inode:5624: inode #19: comm syz.6.2756: corrupted inode contents [ 118.415015][ T3674] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.417006][T12107] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2996: inode #19: comm syz.6.2756: mark_inode_dirty error [ 118.423298][ T3674] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.456451][ T3674] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.464872][ T3674] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 118.479363][T12107] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2999: inode #19: comm syz.6.2756: mark inode dirty (error -117) [ 118.493072][T12107] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 118.553451][ T7544] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 118.614649][T12141] loop6: detected capacity change from 0 to 128 [ 118.633872][T12141] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 118.677426][T12141] ext4 filesystem being mounted at /223/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 118.689641][T12152] netlink: 'syz.3.2777': attribute type 6 has an invalid length. [ 118.763859][T12152] netlink: 'syz.3.2777': attribute type 6 has an invalid length. [ 118.771819][ T3674] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.792224][ T7544] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 118.801526][ T3674] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.835886][ T3674] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.861412][ T3674] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.951745][T12179] bridge0: entered promiscuous mode [ 118.961489][T12179] macsec1: entered promiscuous mode [ 118.968018][T12179] bridge0: port 3(macsec1) entered blocking state [ 118.974610][T12179] bridge0: port 3(macsec1) entered disabled state [ 118.997833][T12179] macsec1: entered allmulticast mode [ 119.003266][T12179] bridge0: entered allmulticast mode [ 119.021791][T12179] macsec1: left allmulticast mode [ 119.026894][T12179] bridge0: left allmulticast mode [ 119.053795][T12179] bridge0: left promiscuous mode [ 119.330462][T12236] ALSA: seq fatal error: cannot create timer (-22) [ 119.552477][T12271] team0: Caught tx_queue_len zero misconfig [ 120.068261][T12321] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.300305][T12366] loop5: detected capacity change from 0 to 2048 [ 120.324581][T12366] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.356528][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.922499][T12410] SELinux: failed to load policy [ 120.965954][T12416] syzkaller0: entered allmulticast mode [ 120.976831][T12416] syzkaller0 (unregistering): left allmulticast mode [ 121.101681][T12428] __nla_validate_parse: 18 callbacks suppressed [ 121.101697][T12428] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2891'. [ 121.209775][T12454] loop3: detected capacity change from 0 to 512 [ 121.235678][T12454] EXT4-fs (loop3): too many log groups per flexible block group [ 121.250034][T12454] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 121.257565][T12454] EXT4-fs (loop3): mount failed [ 121.880704][T12571] netem: incorrect gi model size [ 121.994304][T12601] loop3: detected capacity change from 0 to 512 [ 122.016444][T12601] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 122.044147][T12601] EXT4-fs (loop3): mount failed [ 122.097128][T12612] loop5: detected capacity change from 0 to 1024 [ 122.114886][T12612] EXT4-fs: Ignoring removed orlov option [ 122.121432][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 122.133010][T12612] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.174083][ T6163] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.339696][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 122.339792][ T29] audit: type=1326 audit(1759972206.315:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 122.389297][ T29] audit: type=1326 audit(1759972206.355:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 122.413094][ T29] audit: type=1326 audit(1759972206.355:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 122.436637][ T29] audit: type=1326 audit(1759972206.355:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 122.460259][ T29] audit: type=1326 audit(1759972206.355:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12647 comm="syz.0.2934" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5c809eec9 code=0x7ffc0000 [ 122.596453][T12677] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2941'. [ 122.615880][ T29] audit: type=1326 audit(1759972206.595:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 122.639759][ T29] audit: type=1326 audit(1759972206.595:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 122.663588][ T29] audit: type=1326 audit(1759972206.595:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 122.687569][ T29] audit: type=1326 audit(1759972206.595:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 122.711403][ T29] audit: type=1326 audit(1759972206.595:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12678 comm="syz.2.2942" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f6c965beec9 code=0x7ffc0000 [ 122.761277][T12689] netlink: 'syz.2.2943': attribute type 10 has an invalid length. [ 122.782445][T12689] team0 (unregistering): Port device team_slave_0 removed [ 122.810803][T12689] team0 (unregistering): Port device team_slave_1 removed [ 122.823041][T12689] team0 (unregistering): Port device bond0 removed [ 122.838341][ T3706] ================================================================== [ 122.846457][ T3706] BUG: KCSAN: data-race in alloc_pid / copy_process [ 122.853083][ T3706] [ 122.855410][ T3706] read-write to 0xffffffff8685feb8 of 4 bytes by task 3696 on cpu 1: [ 122.863482][ T3706] alloc_pid+0x539/0x720 [ 122.867734][ T3706] copy_process+0xe25/0x2000 [ 122.872344][ T3706] kernel_clone+0x16c/0x5c0 [ 122.876876][ T3706] user_mode_thread+0x7d/0xb0 [ 122.881617][ T3706] call_usermodehelper_exec_work+0x41/0x160 [ 122.887535][ T3706] process_scheduled_works+0x4cb/0x9d0 [ 122.893115][ T3706] worker_thread+0x582/0x770 [ 122.897727][ T3706] kthread+0x486/0x510 [ 122.901812][ T3706] ret_from_fork+0x122/0x1b0 [ 122.906416][ T3706] ret_from_fork_asm+0x1a/0x30 [ 122.911190][ T3706] [ 122.913517][ T3706] read to 0xffffffff8685feb8 of 4 bytes by task 3706 on cpu 0: [ 122.921062][ T3706] copy_process+0x17fc/0x2000 [ 122.925853][ T3706] kernel_clone+0x16c/0x5c0 [ 122.930464][ T3706] user_mode_thread+0x7d/0xb0 [ 122.935160][ T3706] call_usermodehelper_exec_work+0x41/0x160 [ 122.941077][ T3706] process_scheduled_works+0x4cb/0x9d0 [ 122.946561][ T3706] worker_thread+0x582/0x770 [ 122.951161][ T3706] kthread+0x486/0x510 [ 122.955244][ T3706] ret_from_fork+0x122/0x1b0 [ 122.959850][ T3706] ret_from_fork_asm+0x1a/0x30 [ 122.964627][ T3706] [ 122.966950][ T3706] value changed: 0x80000133 -> 0x80000134 [ 122.972666][ T3706] [ 122.974992][ T3706] Reported by Kernel Concurrency Sanitizer on: [ 122.981158][ T3706] CPU: 0 UID: 0 PID: 3706 Comm: kworker/u8:47 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 122.992735][ T3706] Tainted: [W]=WARN [ 122.996541][ T3706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.006622][ T3706] Workqueue: events_unbound call_usermodehelper_exec_work [ 123.013773][ T3706] ================================================================== [ 130.281483][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!