last executing test programs: 39.324925s ago: executing program 4 (id=209): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)='\x00!G', 0x3}], 0x1, 0x73a, 0x21) 39.226451838s ago: executing program 4 (id=213): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/118, 0x76) syz_emit_ethernet(0x32, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa5610b79b550f41"], 0x0) 39.177265412s ago: executing program 4 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x3) r1 = socket$vsock_stream(0x28, 0x1, 0x0) fgetxattr(r1, &(0x7f0000000000)=ANY=[], 0x0, 0x0) 39.128037166s ago: executing program 4 (id=218): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x14927e, 0xbb) fallocate(r0, 0x11, 0x0, 0x8800000) 39.011738005s ago: executing program 4 (id=223): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004b74ffec850000006d000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000680)='virtio_transport_alloc_pkt\x00', r1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) 38.815989022s ago: executing program 4 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a1f144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 38.776063855s ago: executing program 32 (id=232): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000780)="d8000000100081044e81f782db44b904021d080005000000e8fe552603600e1209000d0000000401a80016000a1f144006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e4dc3b90317008e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000e006dcdf63951f215ce3bb9ad809d5e1cace140efdc0272ae6089ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701000000000000000000", 0xd8}], 0x1}, 0x0) 2.233210535s ago: executing program 0 (id=1805): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20d00, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000300)={0x0, 0x0, 0xffffffff, 0x0, 0x7, "ff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x80000) io_setup(0xea, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x3b9f, r1, 0x0, 0x0, 0x2}]) 2.129507634s ago: executing program 0 (id=1810): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x25}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}]}}) 2.073855819s ago: executing program 0 (id=1815): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) io_uring_enter(r1, 0x1e76, 0xf728, 0x5, 0x0, 0x0) 1.989309906s ago: executing program 0 (id=1818): socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 1.9338425s ago: executing program 0 (id=1819): socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_config_ext={0x8, 0x6}, 0x120, 0x10000, 0x33f8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) prlimit64(0x0, 0xb, 0x0, 0x0) 1.776835383s ago: executing program 0 (id=1824): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) syz_usb_connect(0x2, 0x64, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x7, 0x0, 0x5, 0x2, 0x0, 0x70bd2d, 0x25dfdbfe}, 0x10}}, 0x4) 908.950915ms ago: executing program 2 (id=1839): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 824.766061ms ago: executing program 2 (id=1840): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0x7000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 703.295672ms ago: executing program 2 (id=1842): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$eJzs28FrXEUcB/BfkqapqclGrdUWxEEvFeTR5OBFL0FSkC4obSO0gvBqXnTJczfkLYEVsXry6t8hggjeBPGml1z8DwRvuXisID7JrrZd3RVWQjfI53PZH8z7zs7ssAuzzBy+8tn7O9tVtp13Y3ZmJmZ3I9LdFClm4y8fxwsvf//DM9dv3rq63mxuXEvpyvqN1ZdSSsvPfvvWh18891337JtfL3+zEAcrbx/+svbzwfmDC4e/33ivVaVWldqdbsrT7U6nm98ui7TVqnaylN4oi7wqUqtdFXtD7dtlZ3e3l/L21tLi7l5RVSlv99JO0UvdTuru9VL+bt5qpyzL0tJiMLlT96rNz+/WdR1R1/NxOuq6rh+JxTgbj8ZSLEcjVuKxeDyeiHPxZJyPp+Lp+OqnL3tHCQAAAAAAAAAAAAAAAAAAAOD4THr//0L/qWmPGgAAAAAAAAAAAAAAAAAAAP5frt+8dXW92dy4ltKZiPLT/c39zcHroH19O1pRRhGXoxG/Rf/2/8CgvvJac+Ny6luJT8o7f+bv7G/ODedXoxEvjs6vDvJpOL8Qiw/m16IR50bl52NtZP5MXHr+gXwWjfjxnehEGVtxlL3//h+tpvTq682/5S/2nxtv7mEsDwAAAByLLN0zcv+eZePaB/kJ/h8Y2l8fZS+emurUiYiq98FOXpbFnmJkcelkDKNfnD7ODucjYrLUr3VdT/9DmFIx/puyEBH/ueeZiDgZE/xHMe1fJh6G+4s+7ZEAAAAAAAAAAAAwibHHABf+7YTg3ETHCac9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YAeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBUAAP//0AbP3Q==") r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r1, &(0x7f0000000140)='./file1\x00', r1, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) 614.243849ms ago: executing program 5 (id=1845): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r1}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 579.391032ms ago: executing program 5 (id=1846): setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x7, 0x4, 0x438, 0x240, 0x240, 0x0, 0x350, 0x370, 0x350, 0x4, 0x0, {[{{@arp={@private, @local, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_to_batadv\x00', 'batadv0\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "bc2e329885ea3654891fbae8c6c66e07212432bde429bcda7deb48d85c6f5e269c2021c8f8dc09af0b3f2e10e8ac79cc67e264613c4be6838ee2daacf7926a6e"}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr, @broadcast}}}, {{@arp={@private, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0\x00', 'veth0_to_bond\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x488) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x28, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18006daaed13ff00000000000000000028"], 0x0}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 553.738304ms ago: executing program 3 (id=1847): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000000)={0x184a, 0x1, [{0x1, 0x1}]}) 533.580756ms ago: executing program 5 (id=1848): r0 = mq_open(&(0x7f000084dff0)='z\xbf\x17', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x6, 0x101}) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0xcd0c, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r0, &(0x7f0000001140)=""/4111, 0x100f, 0x9, 0x0) 495.350988ms ago: executing program 2 (id=1849): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r2, 0x6a98047402e98331, 0x70bd28, 0x0, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) 495.016429ms ago: executing program 5 (id=1850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x0) 478.77918ms ago: executing program 3 (id=1851): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)=""/43, 0xfdef}], 0x1}, 0x80) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfdef) 458.074332ms ago: executing program 5 (id=1852): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto(r0, 0x0, 0x0, 0x8080, 0x0, 0x0) 439.281103ms ago: executing program 5 (id=1853): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/cgroup\x00') 387.342928ms ago: executing program 3 (id=1854): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002"], 0x0, 0x42}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 360.02284ms ago: executing program 2 (id=1855): r0 = mq_open(&(0x7f0000000600)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdF\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1b\xf4\xce\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|9\x90\x8d\xf4r\xd9*\xd1\x83\n\x1a\xa8fa2\xd4:^\xd7a\x0f\x12}\a\x9d\xc9h\x02\xbe\xeb\x01\xd39LS\xefJ\xcc<\xc4\xc0\xb4A\xab{\x1b\x15<\x95\x02\xae\xfdT\x98\xf4\x85\a\x01@\x12\xe0<3\xb4\x97\xb6W\x84K\xd7\xc5\xf47\xed\xda4\xe2W\xb6r\xca\x1e\x90\xef\x13\xf1&~\x97n\x9f\x8eS\xa8R\xf6\x9d{9\x1bN\x81\x18~\xd7{', 0x42, 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x2}]) mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a3c0)=""/102381, 0xffffffffffffff32, 0x0, 0x0) 317.574664ms ago: executing program 3 (id=1856): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[], 0x38}, 0x2}, 0x0) 255.712448ms ago: executing program 3 (id=1857): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc32, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r2, &(0x7f0000000400)={0x28, 0x0, 0x2710, @host}, 0x10) 252.365349ms ago: executing program 2 (id=1858): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000002c0), 0x1, 0x4f2, &(0x7f0000000600)="$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") r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x5d6aff9e) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c) 216.387882ms ago: executing program 3 (id=1860): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000a40)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@norecovery}, {@resuid}, {@quota}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r1, &(0x7f00000009c0)="3bf58d7d45d3", 0x6) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 132.617808ms ago: executing program 1 (id=1862): syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a0000001600"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r0, 0x0, 0x51}, 0x18) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 113.18954ms ago: executing program 1 (id=1863): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = io_uring_setup(0x4c0c, &(0x7f0000000140)={0x0, 0x2637, 0x3c00, 0x2, 0x10001d4}) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/6, 0x6}], &(0x7f00000002c0)=[0x7]}, 0x20) 93.557722ms ago: executing program 1 (id=1864): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000001f) fcntl$notify(r1, 0x402, 0x3) 72.707694ms ago: executing program 1 (id=1865): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x200, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&00\t&&') 24.038418ms ago: executing program 1 (id=1866): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0}, 0xc004) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000300)={@link_local, @random="2059249b3790", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "090400", 0x8, 0x11, 0x1, @empty, @mcast2, {[], {0x0, 0xe22, 0x8}}}}}}, 0x0) 0s ago: executing program 1 (id=1867): prlimit64(0x0, 0xb, &(0x7f0000000040)={0x0, 0x3}, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) close(0xffffffffffffffff) fcntl$setsig(r0, 0xa, 0x21) fcntl$setlease(r0, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x146) kernel console output (not intermixed with test programs): an_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.392651][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 30.403531][ T3301] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 30.414236][ T3309] hsr_slave_0: entered promiscuous mode [ 30.420204][ T3309] hsr_slave_1: entered promiscuous mode [ 30.426197][ T3309] debugfs: 'hsr0' already exists in 'hsr' [ 30.431976][ T3309] Cannot create hsr debugfs directory [ 30.443945][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 30.451048][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 30.477029][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 30.487872][ T3301] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 30.508992][ T3301] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 30.551684][ T3308] hsr_slave_0: entered promiscuous mode [ 30.558826][ T3308] hsr_slave_1: entered promiscuous mode [ 30.564751][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 30.570529][ T3308] Cannot create hsr debugfs directory [ 30.576062][ T3310] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 30.585422][ T3310] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 30.594751][ T3310] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 30.610430][ T3310] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 30.692608][ T3307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 30.701929][ T3307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 30.710934][ T3307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 30.720041][ T3307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 30.765128][ T3309] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 30.786592][ T3309] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 30.802344][ T3309] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 30.811546][ T3309] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 30.837636][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 30.852532][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.865070][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 30.874885][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 30.883949][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 30.908828][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 30.928623][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.935715][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.944802][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.951939][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.967386][ T3310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 30.987423][ T3310] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.012718][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.019906][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.028992][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.036081][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.063542][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.080994][ T3310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.091400][ T3310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.132407][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.141009][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.152017][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.159227][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.178038][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.185179][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.209029][ T3309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 31.221783][ T3309] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.234380][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 31.252425][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.259578][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.269092][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.276173][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.290748][ T3310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.305840][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.314718][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.321838][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.344564][ T3309] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 31.354993][ T3309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 31.372150][ T1456] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.379273][ T1456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.509848][ T3309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.558112][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.574851][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 31.601009][ T3301] veth0_vlan: entered promiscuous mode [ 31.612050][ T3310] veth0_vlan: entered promiscuous mode [ 31.631864][ T3301] veth1_vlan: entered promiscuous mode [ 31.648726][ T3310] veth1_vlan: entered promiscuous mode [ 31.678075][ T3301] veth0_macvtap: entered promiscuous mode [ 31.693342][ T3310] veth0_macvtap: entered promiscuous mode [ 31.709698][ T3301] veth1_macvtap: entered promiscuous mode [ 31.718700][ T3310] veth1_macvtap: entered promiscuous mode [ 31.730653][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.748236][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.763380][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 31.772646][ T3307] veth0_vlan: entered promiscuous mode [ 31.787245][ T3310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 31.794751][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.803773][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.824553][ T3307] veth1_vlan: entered promiscuous mode [ 31.830821][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.842427][ T3309] veth0_vlan: entered promiscuous mode [ 31.849709][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.863431][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.881513][ T3309] veth1_vlan: entered promiscuous mode [ 31.888062][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.912707][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.921863][ T3307] veth0_macvtap: entered promiscuous mode [ 31.945351][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 31.955345][ T3307] veth1_macvtap: entered promiscuous mode [ 31.965344][ T3301] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.976664][ T3309] veth0_macvtap: entered promiscuous mode [ 32.003783][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.028305][ T3309] veth1_macvtap: entered promiscuous mode [ 32.060811][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.069556][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.095513][ T3308] veth0_vlan: entered promiscuous mode [ 32.108097][ T3308] veth1_vlan: entered promiscuous mode [ 32.117549][ T3309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.121304][ T3479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.137238][ T3479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.145734][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.158599][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.176865][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.193327][ T3308] veth0_macvtap: entered promiscuous mode [ 32.203301][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.225323][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.234715][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.250221][ T3308] veth1_macvtap: entered promiscuous mode [ 32.265046][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.274205][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.291916][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.309626][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.315713][ T3487] loop2: detected capacity change from 0 to 512 [ 32.330374][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.345351][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.348052][ T3485] syz.3.4 (3485) used greatest stack depth: 10824 bytes left [ 32.369012][ T3487] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 32.370800][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 32.370818][ T29] audit: type=1326 audit(1756489480.686:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 32.384429][ T3487] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 32.411136][ T29] audit: type=1400 audit(1756489480.706:104): avc: denied { mount } for pid=3486 comm="syz.2.3" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 32.442782][ T29] audit: type=1326 audit(1756489480.706:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 32.466112][ T29] audit: type=1400 audit(1756489480.706:106): avc: denied { map_create } for pid=3491 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.475415][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.485133][ T29] audit: type=1400 audit(1756489480.706:107): avc: denied { map_read map_write } for pid=3491 comm="syz.3.8" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 32.513186][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.521949][ T29] audit: type=1326 audit(1756489480.706:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 32.545099][ T29] audit: type=1326 audit(1756489480.706:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 32.568176][ T29] audit: type=1326 audit(1756489480.706:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 32.591418][ T29] audit: type=1326 audit(1756489480.706:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 32.614567][ T29] audit: type=1326 audit(1756489480.706:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.3.8" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 32.647049][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 32.990220][ T3538] bridge0: entered promiscuous mode [ 32.995558][ T3538] macsec1: entered promiscuous mode [ 33.002449][ T3538] bridge0: port 3(macsec1) entered blocking state [ 33.009085][ T3538] bridge0: port 3(macsec1) entered disabled state [ 33.025183][ T3538] macsec1: entered allmulticast mode [ 33.030677][ T3538] bridge0: entered allmulticast mode [ 33.038126][ T3538] macsec1: left allmulticast mode [ 33.043242][ T3538] bridge0: left allmulticast mode [ 33.055390][ T3538] bridge0: left promiscuous mode [ 33.137675][ T3535] syz.2.27 (3535) used greatest stack depth: 10784 bytes left [ 33.159855][ T3538] syz.2.27 (3538) used greatest stack depth: 10704 bytes left [ 33.680204][ T3597] loop2: detected capacity change from 0 to 1024 [ 33.689759][ T3597] EXT4-fs: Ignoring removed orlov option [ 33.710341][ T3597] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.880662][ T3603] loop3: detected capacity change from 0 to 1024 [ 34.007320][ T3603] ======================================================= [ 34.007320][ T3603] WARNING: The mand mount option has been deprecated and [ 34.007320][ T3603] and is ignored by this kernel. Remove the mand [ 34.007320][ T3603] option from the mount to silence this warning. [ 34.007320][ T3603] ======================================================= [ 34.051877][ T3606] loop1: detected capacity change from 0 to 512 [ 34.095529][ T3606] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 34.130928][ T3603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.160729][ T3612] loop0: detected capacity change from 0 to 128 [ 34.172454][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.177737][ T3612] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 34.183378][ T3606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 34.203463][ T3606] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.56: corrupted in-inode xattr: e_value size too large [ 34.218233][ T3612] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.227937][ T3615] loop4: detected capacity change from 0 to 512 [ 34.228597][ T3606] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.56: couldn't read orphan inode 15 (err -117) [ 34.253529][ T3606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 34.302125][ T3615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.337302][ T3615] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 34.360403][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.382221][ T3310] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 34.398402][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.548436][ T3615] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.591101][ T3638] syz.1.69 (3638) used greatest stack depth: 10008 bytes left [ 34.602463][ T47] I/O error, dev loop1, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 2 [ 34.625777][ T3643] loop3: detected capacity change from 0 to 1024 [ 34.632715][ T3643] EXT4-fs: inline encryption not supported [ 34.638787][ T3643] EXT4-fs: Ignoring removed bh option [ 34.698614][ T3643] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 34.768266][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 34.809528][ T3662] SELinux: Context system_u:object_r:wireless_device_t:s0 is not valid (left unmapped). [ 34.830498][ T3664] wireguard0: entered promiscuous mode [ 34.836127][ T3664] wireguard0: entered allmulticast mode [ 34.894789][ T3675] netlink: 28 bytes leftover after parsing attributes in process `syz.3.84'. [ 34.971948][ T3679] syz.4.86 uses obsolete (PF_INET,SOCK_PACKET) [ 35.105192][ T3700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 35.158501][ T3700] bond_slave_0: entered promiscuous mode [ 35.164270][ T3700] bond_slave_1: entered promiscuous mode [ 35.204548][ T3700] macvlan2: entered promiscuous mode [ 35.210032][ T3700] bond0: entered promiscuous mode [ 35.258041][ T3700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 35.594425][ T3747] mmap: syz.1.117 (3747) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 35.606479][ T3745] veth1_to_bond: entered allmulticast mode [ 35.631886][ T3745] veth1_to_bond: left allmulticast mode [ 35.819120][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab84e00: rx timeout, send abort [ 35.827433][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab85e00: rx timeout, send abort [ 35.835731][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ab84e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 35.850094][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ab85e00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 35.928607][ T3776] loop0: detected capacity change from 0 to 512 [ 35.942595][ T3776] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 35.967207][ T3776] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 35.981692][ T3776] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.130: corrupted inode contents [ 36.014719][ T3776] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.130: mark_inode_dirty error [ 36.033964][ T3776] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.130: corrupted inode contents [ 36.075912][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.238937][ T3794] loop4: detected capacity change from 0 to 1024 [ 36.283611][ T3794] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 36.462202][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x1 [ 36.469684][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.477239][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.484688][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.492214][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x2 [ 36.499755][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.507257][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.514747][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.522211][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.529692][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 36.538555][ T3382] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz0] on syz0 [ 36.644763][ T3818] fido_id[3818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 36.667022][ T3830] loop4: detected capacity change from 0 to 512 [ 36.693418][ T3830] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.706348][ T3830] ext4 filesystem being mounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 36.726673][ T3830] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.151: corrupted inode contents [ 36.776393][ T3830] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.151: mark_inode_dirty error [ 36.791229][ T3830] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.151: corrupted inode contents [ 36.803890][ T3830] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.151: mark_inode_dirty error [ 36.820413][ T3830] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #18: comm syz.4.151: directory missing '.' [ 36.861502][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.986924][ T3845] netlink: 40 bytes leftover after parsing attributes in process `syz.4.155'. [ 37.037161][ T3849] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.134126][ T3857] loop1: detected capacity change from 0 to 512 [ 37.143670][ T3857] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.162: casefold flag without casefold feature [ 37.156645][ T3857] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.162: couldn't read orphan inode 15 (err -117) [ 37.171734][ T3857] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.186686][ T3860] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 37.353516][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.449358][ T3868] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 37.574312][ T3874] SELinux: Context is not valid (left unmapped). [ 37.722586][ T3887] loop3: detected capacity change from 0 to 512 [ 37.751077][ T3887] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 37.759107][ T3887] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 37.769679][ T3887] System zones: 0-1, 15-15, 18-18, 34-34 [ 37.775626][ T3887] EXT4-fs (loop3): orphan cleanup on readonly fs [ 37.783305][ T3887] __quota_error: 193 callbacks suppressed [ 37.783321][ T3887] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 37.800169][ T3887] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 37.814829][ T3887] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 37.823791][ T3887] EXT4-fs (loop3): 1 truncate cleaned up [ 37.830067][ T3887] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 37.858934][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 37.897553][ T29] audit: type=1400 audit(1756489486.216:306): avc: denied { create } for pid=3896 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.920555][ T29] audit: type=1400 audit(1756489486.236:307): avc: denied { setopt } for pid=3896 comm="syz.1.177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 37.940300][ T3410] IPVS: starting estimator thread 0... [ 37.968496][ T29] audit: type=1400 audit(1756489486.286:308): avc: denied { create } for pid=3899 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.988415][ T3900] atomic_op ffff88811a8b0128 conn xmit_atomic 0000000000000000 [ 38.008052][ T29] audit: type=1400 audit(1756489486.286:309): avc: denied { bind } for pid=3899 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.027236][ T29] audit: type=1400 audit(1756489486.306:310): avc: denied { write } for pid=3899 comm="syz.2.179" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 38.046491][ T3898] IPVS: using max 2400 ests per chain, 120000 per kthread [ 38.123269][ T29] audit: type=1400 audit(1756489486.386:311): avc: denied { kexec_image_load } for pid=3905 comm="syz.1.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 38.283170][ T29] audit: type=1326 audit(1756489486.596:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 38.306677][ T29] audit: type=1326 audit(1756489486.596:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=160 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 38.330096][ T29] audit: type=1326 audit(1756489486.596:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3914 comm="syz.2.185" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 38.364923][ T3913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.617986][ T3913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.713898][ T3930] 9pnet: Could not find request transport: r [ 38.752615][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.761660][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.771731][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.788921][ T3913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.793711][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.808196][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.817977][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.850718][ T3933] netlink: 36 bytes leftover after parsing attributes in process `syz.0.191'. [ 38.889989][ T3913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 38.913863][ T3944] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 38.922175][ T3944] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 38.984797][ T3952] loop4: detected capacity change from 0 to 512 [ 39.003331][ T31] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.016190][ T3952] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.029390][ T3952] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 39.054241][ T37] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.067480][ T37] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.076106][ T3952] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 39.091169][ T37] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.099929][ T3952] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 39.117204][ T3952] EXT4-fs (loop4): 1 truncate cleaned up [ 39.124455][ T3952] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.154666][ T3308] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.546872][ T4003] loop4: detected capacity change from 0 to 128 [ 39.628387][ T3308] FAT-fs (loop4): error, invalid access to FAT (entry 0xffff0000) [ 39.636300][ T3308] FAT-fs (loop4): Filesystem has been set read-only [ 39.646802][ T3308] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 39.670448][ T3308] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 39.736010][ T4023] process 'syz.3.228' launched './file0' with NULL argv: empty string added [ 39.832306][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.860825][ T4032] SELinux: Context @ is not valid (left unmapped). [ 39.948507][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 39.979727][ T4049] netlink: 'syz.3.240': attribute type 6 has an invalid length. [ 40.010786][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.064667][ T4061] loop3: detected capacity change from 0 to 128 [ 40.084788][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.191102][ T12] bridge_slave_1: left allmulticast mode [ 40.196899][ T12] bridge_slave_1: left promiscuous mode [ 40.202714][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.217778][ T12] bridge_slave_0: left allmulticast mode [ 40.223553][ T12] bridge_slave_0: left promiscuous mode [ 40.229359][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.320621][ T4075] hub 8-0:1.0: USB hub found [ 40.325431][ T4075] hub 8-0:1.0: 8 ports detected [ 40.333313][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 40.343795][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 40.355267][ T12] bond0 (unregistering): Released all slaves [ 40.389017][ T4043] chnl_net:caif_netlink_parms(): no params data found [ 40.408219][ T12] hsr_slave_0: left promiscuous mode [ 40.426240][ T12] hsr_slave_1: left promiscuous mode [ 40.438662][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.446164][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 40.457289][ T4086] __nla_validate_parse: 5 callbacks suppressed [ 40.457305][ T4086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.251'. [ 40.473336][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.480790][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 40.501936][ T12] veth1_macvtap: left promiscuous mode [ 40.514953][ T12] veth0_macvtap: left promiscuous mode [ 40.523016][ T12] veth1_vlan: left promiscuous mode [ 40.530676][ T12] veth0_vlan: left promiscuous mode [ 40.686541][ T12] team0 (unregistering): Port device team_slave_1 removed [ 40.701862][ T12] team0 (unregistering): Port device team_slave_0 removed [ 40.879297][ T4043] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.886531][ T4043] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.908321][ T4133] unsupported nla_type 52263 [ 40.910630][ T4043] bridge_slave_0: entered allmulticast mode [ 40.921941][ T4043] bridge_slave_0: entered promiscuous mode [ 40.950431][ T4043] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.957677][ T4043] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.002941][ T4140] SELinux: policydb table sizes (2,0) do not match mine (8,7) [ 41.021019][ T4043] bridge_slave_1: entered allmulticast mode [ 41.042121][ T4140] SELinux: failed to load policy [ 41.047848][ T4043] bridge_slave_1: entered promiscuous mode [ 41.081010][ T4146] netlink: 'syz.3.268': attribute type 3 has an invalid length. [ 41.092036][ T4043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.109877][ T4043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.136297][ T4043] team0: Port device team_slave_0 added [ 41.147552][ T4043] team0: Port device team_slave_1 added [ 41.170365][ T4159] sd 0:0:1:0: device reset [ 41.207855][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.215005][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.240931][ T4043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.252234][ T4043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.259299][ T4043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.285331][ T4043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.388147][ T4043] hsr_slave_0: entered promiscuous mode [ 41.394315][ T4043] hsr_slave_1: entered promiscuous mode [ 41.407532][ T4043] debugfs: 'hsr0' already exists in 'hsr' [ 41.413311][ T4043] Cannot create hsr debugfs directory [ 41.493653][ T4190] loop1: detected capacity change from 0 to 512 [ 41.504532][ T4192] capability: warning: `syz.0.290' uses 32-bit capabilities (legacy support in use) [ 41.527607][ T4190] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.289: iget: bad i_size value: 38620345925642 [ 41.557934][ T4043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 41.565670][ T4190] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.289: couldn't read orphan inode 15 (err -117) [ 41.590357][ T4043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 41.597713][ T4190] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.612711][ T4043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 41.621591][ T4043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 41.647737][ T4190] EXT4-fs error (device loop1): empty_inline_dir:1760: inode #12: block 7: comm syz.1.289: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0 [ 41.669105][ T4203] pimreg: entered allmulticast mode [ 41.676745][ T4190] EXT4-fs warning (device loop1): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60 [ 41.693246][ T4203] pimreg: left allmulticast mode [ 41.719730][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.758765][ T4043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.770928][ T4214] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 41.795719][ T4043] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.806560][ T145] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.813711][ T145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.825484][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.832695][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.966546][ T4043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 42.191811][ T4043] veth0_vlan: entered promiscuous mode [ 42.192576][ T4269] netlink: 256 bytes leftover after parsing attributes in process `syz.0.306'. [ 42.204416][ T4043] veth1_vlan: entered promiscuous mode [ 42.211921][ T4271] loop2: detected capacity change from 0 to 512 [ 42.219351][ T4271] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 42.234722][ T4043] veth0_macvtap: entered promiscuous mode [ 42.247018][ T4271] EXT4-fs (loop2): 1 truncate cleaned up [ 42.248765][ T4043] veth1_macvtap: entered promiscuous mode [ 42.257658][ T4271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.296172][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 42.311728][ T4043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 42.324661][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.343669][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.353295][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.363620][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.375647][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 42.409361][ T4283] loop2: detected capacity change from 0 to 1024 [ 42.410642][ T4285] loop0: detected capacity change from 0 to 512 [ 42.428778][ T4283] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.444419][ T4285] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002] [ 42.453022][ T4285] System zones: 0-2, 18-18, 34-35 [ 42.459307][ T4285] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.472084][ T4285] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.500781][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.530431][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.592099][ T4306] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 42.603173][ T4306] FAT-fs (loop11): unable to read boot sector [ 42.611821][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 42.620856][ T4308] netlink: 348 bytes leftover after parsing attributes in process `syz.0.320'. [ 42.629920][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 42.638797][ T4308] netlink: 348 bytes leftover after parsing attributes in process `syz.0.320'. [ 42.648534][ T4308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.320'. [ 42.713759][ T4323] loop5: detected capacity change from 0 to 512 [ 42.729007][ T4323] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 42.763474][ T4323] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 42.779230][ T4323] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.807516][ T4336] macvlan1: entered promiscuous mode [ 42.814008][ T4336] ipvlan0: entered promiscuous mode [ 42.816582][ T4337] netlink: 'syz.0.333': attribute type 21 has an invalid length. [ 42.819949][ T4336] ipvlan0: left promiscuous mode [ 42.827046][ T4337] netlink: 14581 bytes leftover after parsing attributes in process `syz.0.333'. [ 42.834122][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.841419][ T4336] macvlan1: left promiscuous mode [ 42.886472][ T4341] loop1: detected capacity change from 0 to 512 [ 42.893146][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 42.893161][ T29] audit: type=1326 audit(1756489491.216:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 42.894754][ T4341] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 42.913123][ T29] audit: type=1326 audit(1756489491.226:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 42.960004][ T4341] EXT4-fs (loop1): 1 truncate cleaned up [ 42.966002][ T4341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.980047][ T29] audit: type=1326 audit(1756489491.246:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.003410][ T29] audit: type=1326 audit(1756489491.246:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.026736][ T29] audit: type=1326 audit(1756489491.246:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.050018][ T29] audit: type=1326 audit(1756489491.246:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.073287][ T29] audit: type=1326 audit(1756489491.246:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.096545][ T29] audit: type=1326 audit(1756489491.296:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.120161][ T29] audit: type=1326 audit(1756489491.306:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.143471][ T29] audit: type=1326 audit(1756489491.366:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4342 comm="syz.5.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=70 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 43.189918][ T4354] syz.3.340 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 43.203738][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.322632][ T4375] random: crng reseeded on system resumption [ 43.334146][ T4379] loop2: detected capacity change from 0 to 512 [ 43.353744][ T4381] loop5: detected capacity change from 0 to 512 [ 43.370757][ T4381] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 43.390003][ T4381] EXT4-fs (loop5): 1 truncate cleaned up [ 43.391548][ T4379] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 43.408006][ T4381] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.441347][ T4379] EXT4-fs (loop2): mount failed [ 43.510953][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.528022][ T4398] loop2: detected capacity change from 0 to 512 [ 43.535393][ T4398] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 43.592779][ T4398] EXT4-fs (loop2): 1 truncate cleaned up [ 43.600304][ T4398] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.622255][ T4398] EXT4-fs warning (device loop2): ext4_block_to_path:107: block 1937076852 > max in inode 13 [ 43.664228][ T4411] loop0: detected capacity change from 0 to 1024 [ 43.690274][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.704576][ T4414] loop3: detected capacity change from 0 to 512 [ 43.710315][ T4411] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 43.724927][ T4414] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 43.741571][ T4411] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.764143][ T4414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 43.773715][ T4411] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.365: lblock 3 mapped to illegal pblock 3 (length 3) [ 43.794830][ T4414] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 43.811442][ T4411] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 43.823916][ T4411] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.823916][ T4411] [ 43.860786][ T4430] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.365: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 43.879234][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.891925][ T4430] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem [ 43.906696][ T4434] netlink: 'syz.1.376': attribute type 1 has an invalid length. [ 43.927518][ T4411] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.365: lblock 0 mapped to illegal pblock 0 (length 1) [ 43.943662][ T4411] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 43.956091][ T4411] EXT4-fs (loop0): This should not happen!! Data will be lost [ 43.956091][ T4411] [ 44.010446][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 44.059666][ T4450] random: crng reseeded on system resumption [ 44.144566][ T4472] netlink: 12 bytes leftover after parsing attributes in process `syz.3.392'. [ 44.153535][ T4472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'. [ 44.164886][ T4472] netlink: 'syz.3.392': attribute type 6 has an invalid length. [ 44.248593][ T4480] Zero length message leads to an empty skb [ 44.324517][ T4493] openvswitch: netlink: Message has 6 unknown bytes. [ 44.359429][ T4498] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.400580][ T4498] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.464713][ T4498] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.509856][ T4498] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.582848][ T145] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.597269][ T145] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.616360][ T145] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.631165][ T145] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.666385][ T4529] veth1_to_bond: entered allmulticast mode [ 44.707716][ T4528] veth1_to_bond: left allmulticast mode [ 44.761001][ T4545] tmpfs: Bad value for 'mpol' [ 44.766371][ T4547] loop5: detected capacity change from 0 to 1024 [ 44.795445][ T4547] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 44.818259][ T4547] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 44.854605][ T4554] loop1: detected capacity change from 0 to 4096 [ 44.864295][ T4547] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.424: lblock 3 mapped to illegal pblock 3 (length 3) [ 44.887545][ T4554] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 44.906810][ T4547] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 44.919227][ T4547] EXT4-fs (loop5): This should not happen!! Data will be lost [ 44.919227][ T4547] [ 44.939346][ T4554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.960861][ T4558] EXT4-fs error (device loop5): ext4_ext_remove_space:2955: inode #15: comm syz.5.424: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 44.981251][ T4558] EXT4-fs error (device loop5) in ext4_setattr:6071: Corrupt filesystem [ 45.003724][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.013710][ T4547] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: comm syz.5.424: lblock 0 mapped to illegal pblock 0 (length 1) [ 45.029269][ T4547] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 45.041664][ T4547] EXT4-fs (loop5): This should not happen!! Data will be lost [ 45.041664][ T4547] [ 45.089104][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 45.203424][ T4578] loop0: detected capacity change from 0 to 1024 [ 45.223262][ T4578] EXT4-fs: Ignoring removed i_version option [ 45.261237][ T4578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.282243][ T4578] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 45.334299][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.413488][ T4614] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.437703][ T4618] loop2: detected capacity change from 0 to 128 [ 45.446137][ T4618] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 45.455250][ T4618] System zones: 1-3, 19-19, 35-36 [ 45.461647][ T4618] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 45.475631][ T4618] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 45.511169][ T4618] EXT4-fs warning (device loop2): verify_group_input:137: Cannot add at group 1601403251 (only 1 groups) [ 45.511413][ T4614] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.536434][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 45.571399][ T4614] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.661765][ T4614] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.663224][ T4632] loop2: detected capacity change from 0 to 512 [ 45.692945][ T4632] EXT4-fs (loop2): too many log groups per flexible block group [ 45.700943][ T4632] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 45.708037][ T4632] EXT4-fs (loop2): mount failed [ 45.759455][ T145] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.779569][ T4640] loop2: detected capacity change from 0 to 512 [ 45.787427][ T4640] EXT4-fs: Ignoring removed oldalloc option [ 45.795695][ T145] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.808580][ T4640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.828322][ T145] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.841421][ T4640] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 45.862040][ T145] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.885094][ T4640] EXT4-fs error (device loop2): ext4_empty_dir:3077: inode #12: comm syz.2.463: invalid size [ 45.932299][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.000401][ T4647] loop0: detected capacity change from 0 to 512 [ 46.008847][ T4647] EXT4-fs: Ignoring removed oldalloc option [ 46.029996][ T4647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.055133][ T4647] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.109834][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.121792][ T4661] vhci_hcd: invalid port number 0 [ 46.168240][ T4669] loop2: detected capacity change from 0 to 128 [ 46.181510][ T4675] loop5: detected capacity change from 0 to 2048 [ 46.209489][ T4677] Invalid ELF header magic: != ELF [ 46.270860][ T4669] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 46.285555][ T4669] System zones: 1-3, 19-19, 35-36 [ 46.295497][ T4669] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 46.309989][ T4669] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 46.346936][ T4669] EXT4-fs warning (device loop2): verify_group_input:156: Last group not full [ 46.404295][ T3309] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 46.414903][ T4675] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 46.432634][ T4675] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.478: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 46.451349][ T4675] EXT4-fs (loop5): Remounting filesystem read-only [ 46.468290][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.540259][ T4702] serio: Serial port ptm0 [ 46.558263][ T4704] __nla_validate_parse: 5 callbacks suppressed [ 46.558326][ T4704] netlink: 272 bytes leftover after parsing attributes in process `syz.2.486'. [ 46.624774][ T4719] netlink: 256 bytes leftover after parsing attributes in process `syz.3.496'. [ 46.635758][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.644658][ T4715] netlink: 348 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.653867][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.662768][ T4715] netlink: 348 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.671899][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.696156][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.705157][ T4715] netlink: 348 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.714182][ T4715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.494'. [ 46.903318][ T4762] loop1: detected capacity change from 0 to 256 [ 46.911460][ T4762] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 46.924301][ T4762] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 47.150086][ T4811] loop5: detected capacity change from 0 to 512 [ 47.159640][ T4811] EXT4-fs: Ignoring removed mblk_io_submit option [ 47.171845][ T4811] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 47.204400][ T4811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 47.223906][ T4811] System zones: 1-12 [ 47.228581][ T4811] EXT4-fs (loop5): 1 truncate cleaned up [ 47.234831][ T4811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.294036][ T4043] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.339732][ T4841] geneve2: entered promiscuous mode [ 47.345077][ T4841] geneve2: entered allmulticast mode [ 47.432722][ T4857] loop1: detected capacity change from 0 to 128 [ 47.446274][ T4857] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 47.454334][ T4857] FAT-fs (loop1): Filesystem has been set read-only [ 47.461403][ T4857] syz.1.560: attempt to access beyond end of device [ 47.461403][ T4857] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 47.475451][ T4857] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 47.483393][ T4857] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 47.492723][ T4857] syz.1.560: attempt to access beyond end of device [ 47.492723][ T4857] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.510645][ T4857] syz.1.560: attempt to access beyond end of device [ 47.510645][ T4857] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.524278][ T4857] syz.1.560: attempt to access beyond end of device [ 47.524278][ T4857] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.539267][ T4857] syz.1.560: attempt to access beyond end of device [ 47.539267][ T4857] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.564703][ T4869] syz.1.560: attempt to access beyond end of device [ 47.564703][ T4869] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.582082][ T4869] syz.1.560: attempt to access beyond end of device [ 47.582082][ T4869] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.595493][ T4857] syz.1.560: attempt to access beyond end of device [ 47.595493][ T4857] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.602629][ T4867] IPv6: Can't replace route, no match found [ 47.609830][ T4857] syz.1.560: attempt to access beyond end of device [ 47.609830][ T4857] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.642107][ T4857] syz.1.560: attempt to access beyond end of device [ 47.642107][ T4857] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.917476][ T4915] loop2: detected capacity change from 0 to 1024 [ 47.924161][ T4915] EXT4-fs: Ignoring removed orlov option [ 47.942163][ T4915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 47.956554][ T4915] EXT4-fs (loop2): Online defrag not supported with bigalloc [ 48.008383][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.087870][ T29] kauditd_printk_skb: 768 callbacks suppressed [ 48.087885][ T29] audit: type=1326 audit(1756489497.410:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.126844][ T29] audit: type=1326 audit(1756489497.440:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.150397][ T29] audit: type=1326 audit(1756489497.440:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.173773][ T29] audit: type=1326 audit(1756489497.440:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.197353][ T29] audit: type=1326 audit(1756489497.440:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.220769][ T29] audit: type=1326 audit(1756489497.440:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.244166][ T29] audit: type=1326 audit(1756489497.440:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.267612][ T29] audit: type=1326 audit(1756489497.440:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.291165][ T29] audit: type=1326 audit(1756489497.440:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.314820][ T29] audit: type=1326 audit(1756489497.440:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4928 comm="syz.5.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f118b7eebe9 code=0x7ffc0000 [ 48.535452][ T4962] loop5: detected capacity change from 0 to 256 [ 48.569357][ T4968] bridge0: port 3(batadv1) entered blocking state [ 48.575975][ T4968] bridge0: port 3(batadv1) entered disabled state [ 48.592906][ T4968] batadv1: entered allmulticast mode [ 48.662991][ T4968] batadv1: entered promiscuous mode [ 48.709119][ T4987] loop5: detected capacity change from 0 to 128 [ 48.793601][ T5003] loop1: detected capacity change from 0 to 512 [ 48.803908][ T5003] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.626: error while reading EA inode 32 err=-116 [ 48.816731][ T5003] EXT4-fs (loop1): Remounting filesystem read-only [ 48.823335][ T5003] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 48.835359][ T5003] EXT4-fs (loop1): 1 orphan inode deleted [ 48.842386][ T5003] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 48.893353][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.951697][ T5028] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 49.077795][ T770] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 49.087105][ T770] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 49.135196][ T5061] loop3: detected capacity change from 0 to 128 [ 49.166235][ T5063] netlink: 'syz.2.654': attribute type 3 has an invalid length. [ 49.268499][ T5088] loop3: detected capacity change from 0 to 128 [ 49.276941][ T5087] Driver unsupported XDP return value 0 on prog (id 399) dev N/A, expect packet loss! [ 49.295717][ T5090] loop2: detected capacity change from 0 to 128 [ 49.317051][ T5090] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 49.337542][ T5090] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.369504][ T770] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 49.497176][ T5128] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5128 comm=syz.2.684 [ 49.520810][ T5130] netlink: 'syz.1.685': attribute type 32 has an invalid length. [ 49.539374][ T5130] (unnamed net_device) (uninitialized): option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 49.671424][ T5153] geneve2: entered promiscuous mode [ 49.676703][ T5153] geneve2: entered allmulticast mode [ 49.909194][ T5186] bridge0: port 3(batadv1) entered blocking state [ 49.915690][ T5186] bridge0: port 3(batadv1) entered disabled state [ 49.922417][ T5186] batadv1: entered allmulticast mode [ 49.928837][ T5186] batadv1: entered promiscuous mode [ 49.979996][ T5193] syzkaller1: entered promiscuous mode [ 49.985509][ T5193] syzkaller1: entered allmulticast mode [ 50.047296][ T5201] loop0: detected capacity change from 0 to 512 [ 50.055325][ T5201] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.066981][ T5201] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 50.077153][ T5201] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.718: Corrupt directory, running e2fsck is recommended [ 50.090693][ T5201] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 50.099153][ T5201] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.718: corrupted in-inode xattr: invalid ea_ino [ 50.116907][ T5201] EXT4-fs (loop0): Remounting filesystem read-only [ 50.123874][ T5201] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.140539][ T5201] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.152136][ T5201] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 50.162842][ T5201] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.718: Corrupt directory, running e2fsck is recommended [ 50.178004][ T5201] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.189656][ T5201] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 50.199866][ T5201] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.718: Corrupt directory, running e2fsck is recommended [ 50.213516][ T5201] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.225116][ T5201] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it [ 50.235396][ T5201] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.718: Corrupt directory, running e2fsck is recommended [ 50.249067][ T5201] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 50.269757][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.319313][ T5215] loop0: detected capacity change from 0 to 2048 [ 50.330056][ T5215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 50.342550][ T5215] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 50.369285][ T770] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 345: padding at end of block bitmap is not set [ 50.384346][ T770] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 117 [ 50.396779][ T770] EXT4-fs (loop0): This should not happen!! Data will be lost [ 50.396779][ T770] [ 50.408155][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.408357][ T51] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 50.426516][ T51] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 50.610468][ T1035] hid_parser_main: 22 callbacks suppressed [ 50.610488][ T1035] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 50.627359][ T1035] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 50.830898][ T5272] loop0: detected capacity change from 0 to 512 [ 51.174432][ T5335] geneve2: entered promiscuous mode [ 51.180004][ T5335] geneve2: entered allmulticast mode [ 51.186619][ T5338] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 51.272466][ T5350] loop0: detected capacity change from 0 to 512 [ 51.279740][ T5350] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 51.300203][ T5350] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 51.320390][ T5350] System zones: 0-2, 18-18, 34-34 [ 51.331365][ T5350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 51.344072][ T5350] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 51.367917][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 51.387281][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.398758][ T5350] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 51.443259][ T770] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 79 with max blocks 1 with error 28 [ 51.455639][ T770] EXT4-fs (loop0): This should not happen!! Data will be lost [ 51.455639][ T770] [ 51.465417][ T770] EXT4-fs (loop0): Total free blocks count 0 [ 51.471461][ T770] EXT4-fs (loop0): Free/Dirty block details [ 51.477424][ T770] EXT4-fs (loop0): free_blocks=39626 [ 51.482727][ T770] EXT4-fs (loop0): dirty_blocks=1 [ 51.487800][ T770] EXT4-fs (loop0): Block reservation details [ 51.493792][ T770] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 51.509688][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.519292][ T5361] loop5: detected capacity change from 0 to 8192 [ 51.622209][ T5374] atomic_op ffff88810569b128 conn xmit_atomic 0000000000000000 [ 51.688821][ T5382] 9p: Unknown uid 00000000004294967295 [ 51.814060][ T5405] __nla_validate_parse: 15 callbacks suppressed [ 51.814080][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 51.876755][ T5411] atomic_op ffff888105699128 conn xmit_atomic 0000000000000000 [ 52.160111][ T770] batman_adv: batadv1: IGMP Querier appeared [ 52.192871][ T5448] loop2: detected capacity change from 0 to 2048 [ 52.203903][ T5450] 9p: Unknown uid 00000000004294967295 [ 52.221566][ T5448] EXT4-fs (loop2): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.271517][ T5448] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.837: bg 0: block 120: padding at end of block bitmap is not set [ 52.326500][ T5470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'. [ 52.335498][ T5470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.848'. [ 52.381181][ T3309] EXT4-fs (loop2): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 52.439483][ T5482] hub 2-0:1.0: USB hub found [ 52.444184][ T5482] hub 2-0:1.0: 8 ports detected [ 52.494764][ T5488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.856'. [ 52.506590][ T5491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=5491 comm=syz.2.858 [ 52.519195][ T5491] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5491 comm=syz.2.858 [ 52.615564][ T5508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.865'. [ 52.716650][ T5520] netlink: 100 bytes leftover after parsing attributes in process `syz.2.870'. [ 52.762866][ T5524] loop2: detected capacity change from 0 to 2048 [ 52.821865][ T5524] loop2: p2 p3 p7 [ 52.855547][ T3410] IPVS: starting estimator thread 0... [ 52.863282][ T5531] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 52.950103][ T5535] IPVS: using max 2496 ests per chain, 124800 per kthread [ 53.462986][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 53.463005][ T29] audit: type=1400 audit(1756489502.781:1594): avc: denied { create } for pid=5543 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.488691][ T29] audit: type=1400 audit(1756489502.781:1595): avc: denied { ioctl } for pid=5543 comm="syz.3.880" path="socket:[12447]" dev="sockfs" ino=12447 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 53.513253][ T29] audit: type=1400 audit(1756489502.781:1596): avc: denied { write } for pid=5543 comm="syz.3.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.549131][ T5542] batadv0: entered promiscuous mode [ 53.554433][ T5542] macvtap1: entered promiscuous mode [ 53.560793][ T5542] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 53.569593][ T5542] batadv0: left promiscuous mode [ 53.582139][ T5548] loop0: detected capacity change from 0 to 512 [ 53.604960][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.633797][ T29] audit: type=1400 audit(1756489502.941:1597): avc: denied { name_bind } for pid=5549 comm="syz.3.884" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.647145][ T5548] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.655588][ T29] audit: type=1400 audit(1756489502.941:1598): avc: denied { node_bind } for pid=5549 comm="syz.3.884" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.777832][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.818689][ T29] audit: type=1400 audit(1756489503.011:1599): avc: denied { create } for pid=5547 comm="syz.0.883" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 53.839013][ T29] audit: type=1400 audit(1756489503.011:1600): avc: denied { read write } for pid=5547 comm="syz.0.883" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.861655][ T29] audit: type=1400 audit(1756489503.011:1601): avc: denied { open } for pid=5547 comm="syz.0.883" path="/194/bus/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 53.884495][ T29] audit: type=1400 audit(1756489503.041:1602): avc: denied { setopt } for pid=5554 comm="syz.3.885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.904164][ T29] audit: type=1400 audit(1756489503.121:1603): avc: denied { ioctl } for pid=5560 comm="syz.3.890" path="socket:[11681]" dev="sockfs" ino=11681 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.931015][ T5567] loop5: detected capacity change from 0 to 128 [ 53.965028][ T5567] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 53.972953][ T5567] FAT-fs (loop5): Filesystem has been set read-only [ 53.980914][ T5567] bio_check_eod: 13686 callbacks suppressed [ 53.980932][ T5567] syz.5.889: attempt to access beyond end of device [ 53.980932][ T5567] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 54.011906][ T5567] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 54.019835][ T5567] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 54.028597][ T5577] syz.5.889: attempt to access beyond end of device [ 54.028597][ T5577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.054449][ T5567] syz.5.889: attempt to access beyond end of device [ 54.054449][ T5567] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.068094][ T5577] syz.5.889: attempt to access beyond end of device [ 54.068094][ T5577] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.081678][ T5567] syz.5.889: attempt to access beyond end of device [ 54.081678][ T5567] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.125443][ T5567] syz.5.889: attempt to access beyond end of device [ 54.125443][ T5567] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.139322][ T5567] syz.5.889: attempt to access beyond end of device [ 54.139322][ T5567] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.194240][ T5567] syz.5.889: attempt to access beyond end of device [ 54.194240][ T5567] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.213832][ T5567] syz.5.889: attempt to access beyond end of device [ 54.213832][ T5567] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.228858][ T5567] syz.5.889: attempt to access beyond end of device [ 54.228858][ T5567] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 54.269532][ T5597] SELinux: policydb version 0 does not match my version range 15-35 [ 54.277953][ T5597] SELinux: failed to load policy [ 54.942713][ T5678] loop2: detected capacity change from 0 to 128 [ 54.960284][ T5680] sd 0:0:1:0: device reset [ 54.966190][ T5678] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 54.974054][ T5678] FAT-fs (loop2): Filesystem has been set read-only [ 54.981293][ T5678] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 54.989228][ T5678] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 54.989701][ T5682] loop1: detected capacity change from 0 to 1024 [ 55.018013][ T5682] EXT4-fs: Ignoring removed nobh option [ 55.023839][ T5682] EXT4-fs: Ignoring removed bh option [ 55.064711][ T5682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.831847][ T5768] loop3: detected capacity change from 0 to 512 [ 55.849978][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.864209][ T5768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.878650][ T5768] ext4 filesystem being mounted at /222/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.928102][ T5768] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 56.000078][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.052025][ T5800] vxcan1: tx address claim with dest, not broadcast [ 56.139674][ T5812] bond1: entered promiscuous mode [ 56.144786][ T5812] bond1: entered allmulticast mode [ 56.150624][ T5812] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.161911][ T5812] bond1 (unregistering): Released all slaves [ 56.173696][ T5816] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 56.257401][ T5829] loop3: detected capacity change from 0 to 512 [ 56.301280][ T5829] EXT4-fs (loop3): 1 orphan inode deleted [ 56.307717][ T5829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.321808][ T31] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 1 [ 56.334241][ T5829] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 56.372784][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.387050][ T145] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 1 [ 56.482846][ T5846] 9pnet_fd: Insufficient options for proto=fd [ 56.510846][ T5848] loop2: detected capacity change from 0 to 1024 [ 56.523930][ T5848] EXT4-fs: Ignoring removed oldalloc option [ 56.536256][ T5848] EXT4-fs: Ignoring removed orlov option [ 56.557583][ T5848] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 56.589228][ T5852] team0 (unregistering): Port device team_slave_0 removed [ 56.597537][ T5848] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 56.612599][ T5852] team0 (unregistering): Port device team_slave_1 removed [ 56.648897][ T5848] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.1015: Allocating blocks 497-513 which overlap fs metadata [ 56.792147][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 56.852554][ T5866] 9pnet_fd: Insufficient options for proto=fd [ 57.094653][ T5882] loop3: detected capacity change from 0 to 8192 [ 57.130690][ T5889] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1033'. [ 57.140115][ T5882] loop3: p1 p2 p3 p4 [ 57.157112][ T5882] loop3: p1 size 3523149824 extends beyond EOD, truncated [ 57.172242][ T5889] 0{X: renamed from gretap0 (while UP) [ 57.178626][ T5882] loop3: p2 start 4293394688 is beyond EOD, truncated [ 57.185447][ T5882] loop3: p3 start 150994944 is beyond EOD, truncated [ 57.192336][ T5882] loop3: p4 size 50331648 extends beyond EOD, truncated [ 57.200925][ T5889] 0{X: entered allmulticast mode [ 57.206937][ T5889] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 57.423767][ T5924] team0 (unregistering): Port device team_slave_0 removed [ 57.459809][ T5924] team0 (unregistering): Port device team_slave_1 removed [ 57.489631][ T5930] SELinux: security_context_str_to_sid () failed with errno=-22 [ 57.537205][ T5936] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1054'. [ 57.582680][ T5938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.619339][ T5938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.801724][ T5962] loop2: detected capacity change from 0 to 1024 [ 57.827594][ T5962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.851770][ T5962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.875851][ T5962] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.890055][ T5962] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 57.905379][ T5962] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 3 with error 28 [ 57.918093][ T5962] EXT4-fs (loop2): This should not happen!! Data will be lost [ 57.918093][ T5962] [ 57.927910][ T5962] EXT4-fs (loop2): Total free blocks count 0 [ 57.933953][ T5962] EXT4-fs (loop2): Free/Dirty block details [ 57.939902][ T5962] EXT4-fs (loop2): free_blocks=4293918720 [ 57.945674][ T5962] EXT4-fs (loop2): dirty_blocks=0 [ 57.950785][ T5962] EXT4-fs (loop2): Block reservation details [ 57.956828][ T5962] EXT4-fs (loop2): i_reserved_data_blocks=0 [ 58.118282][ T6001] batadv0: entered promiscuous mode [ 58.123590][ T6001] macvtap1: entered promiscuous mode [ 58.133252][ T6001] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 58.144577][ T6001] batadv0: left promiscuous mode [ 58.240757][ T6019] loop3: detected capacity change from 0 to 512 [ 58.249197][ T6019] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 58.266212][ T6019] EXT4-fs (loop3): 1 truncate cleaned up [ 58.281696][ T6019] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.474793][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 58.474810][ T29] audit: type=1400 audit(1756489507.791:1930): avc: denied { sys_module } for pid=6058 comm="syz.0.1106" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 58.485926][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'. [ 58.511189][ T6059] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1106'. [ 58.513159][ T5962] syz.2.1066 (5962) used greatest stack depth: 9704 bytes left [ 58.520201][ T6059] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1106'. [ 58.587947][ T29] audit: type=1400 audit(1756489507.911:1931): avc: denied { ioctl } for pid=6070 comm="syz.3.1113" path="socket:[13249]" dev="sockfs" ino=13249 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 58.620697][ T29] audit: type=1400 audit(1756489507.941:1932): avc: denied { append } for pid=6074 comm="syz.0.1114" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 58.706792][ T29] audit: type=1400 audit(1756489508.011:1933): avc: denied { read } for pid=6078 comm="syz.2.1115" name="usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.730391][ T29] audit: type=1400 audit(1756489508.011:1934): avc: denied { open } for pid=6078 comm="syz.2.1115" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.737548][ T6093] loop3: detected capacity change from 0 to 512 [ 58.754408][ T29] audit: type=1400 audit(1756489508.011:1935): avc: denied { ioctl } for pid=6078 comm="syz.2.1115" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 58.754453][ T29] audit: type=1326 audit(1756489508.021:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 58.809585][ T29] audit: type=1326 audit(1756489508.021:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 58.833115][ T29] audit: type=1326 audit(1756489508.021:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 58.856866][ T29] audit: type=1326 audit(1756489508.021:1939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6080 comm="syz.3.1118" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 58.919558][ T6098] loop2: detected capacity change from 0 to 512 [ 58.925659][ T6100] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1126'. [ 58.926193][ T6098] EXT4-fs: Ignoring removed oldalloc option [ 58.934850][ T6100] netlink: 'syz.3.1126': attribute type 7 has an invalid length. [ 58.948651][ T6100] netlink: 'syz.3.1126': attribute type 8 has an invalid length. [ 58.956588][ T6100] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1126'. [ 58.973204][ T6100] gretap0: entered promiscuous mode [ 58.979546][ T6100] batadv_slave_1: entered promiscuous mode [ 58.993602][ T6100] erspan0: entered promiscuous mode [ 59.002495][ T6098] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 59.020428][ T6105] pim6reg: entered allmulticast mode [ 59.044542][ T6108] loop3: detected capacity change from 0 to 512 [ 59.048568][ T6098] EXT4-fs (loop2): 1 truncate cleaned up [ 59.054704][ T6105] pim6reg: left allmulticast mode [ 59.075016][ T6110] sch_fq: defrate 4294967295 ignored. [ 59.088393][ T6108] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 59.215764][ T6132] loop2: detected capacity change from 0 to 2048 [ 59.227219][ T6137] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1144'. [ 59.245001][ T6132] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 59.319073][ T6149] macvtap0: refused to change device tx_queue_len [ 59.467154][ T6169] loop5: detected capacity change from 0 to 128 [ 59.508969][ T6169] bio_check_eod: 23018 callbacks suppressed [ 59.508986][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.508986][ T6169] loop5: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 59.537072][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.537072][ T6169] loop5: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 59.555384][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.555384][ T6169] loop5: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 59.569419][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.569419][ T6169] loop5: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 59.583520][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.583520][ T6169] loop5: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 59.599456][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.599456][ T6169] loop5: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 59.614075][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.614075][ T6169] loop5: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 59.627850][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.627850][ T6169] loop5: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 59.642405][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.642405][ T6169] loop5: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 59.680997][ T6169] syz.5.1157: attempt to access beyond end of device [ 59.680997][ T6169] loop5: rw=2049, sector=297, nr_sectors = 9 limit=128 [ 59.696910][ T6174] loop0: detected capacity change from 0 to 128 [ 59.722391][ T6174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 59.730782][ T6174] System zones: 1-3, 19-19, 35-36 [ 59.747105][ T6174] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 59.843879][ T6192] hub 9-0:1.0: USB hub found [ 59.848804][ T6192] hub 9-0:1.0: 8 ports detected [ 59.861342][ T6191] vhci_hcd: invalid port number 96 [ 59.866539][ T6191] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 59.909201][ T6199] ref_ctr_offset mismatch. inode: 0x565 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 60.110070][ T6239] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=6239 comm=syz.0.1189 [ 60.126473][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1190'. [ 60.173753][ T6251] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1194'. [ 60.371165][ T6277] bond_slave_0: entered promiscuous mode [ 60.376934][ T6277] bond_slave_1: entered promiscuous mode [ 60.401480][ T6277] macsec1: entered allmulticast mode [ 60.406874][ T6277] bond0: entered allmulticast mode [ 60.412163][ T6277] bond_slave_0: entered allmulticast mode [ 60.417971][ T6277] bond_slave_1: entered allmulticast mode [ 60.438890][ T6277] bond0: left allmulticast mode [ 60.443870][ T6277] bond_slave_0: left allmulticast mode [ 60.450138][ T6277] bond_slave_1: left allmulticast mode [ 60.455753][ T6277] bond_slave_0: left promiscuous mode [ 60.461206][ T6277] bond_slave_1: left promiscuous mode [ 60.536825][ T6295] loop2: detected capacity change from 0 to 1024 [ 60.544630][ T6295] ext4: Bad value for 'max_dir_size_kb' [ 60.573960][ T6300] netlink: 'syz.0.1216': attribute type 7 has an invalid length. [ 60.581801][ T6300] netlink: 'syz.0.1216': attribute type 8 has an invalid length. [ 60.601864][ T6300] gretap0: entered promiscuous mode [ 60.608556][ T6300] batadv_slave_1: entered promiscuous mode [ 60.614888][ T6300] erspan0: entered promiscuous mode [ 60.638268][ T6300] debugfs: 'hsr1' already exists in 'hsr' [ 60.644125][ T6300] Cannot create hsr debugfs directory [ 60.784939][ T6324] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 60.796007][ T6323] IPVS: stopping master sync thread 6324 ... [ 60.859020][ T6334] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 61.296755][ T6408] netlink: 'syz.0.1264': attribute type 3 has an invalid length. [ 61.420474][ T6415] loop1: detected capacity change from 0 to 128 [ 61.428944][ T6415] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 61.438842][ T6415] System zones: 1-3, 19-19, 35-36 [ 61.490597][ T6431] program syz.5.1273 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 61.513018][ T6415] ext4 filesystem being mounted at /216/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 61.601194][ T6436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.611549][ T6436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.675216][ T6438] loop1: detected capacity change from 0 to 4096 [ 61.744551][ T6443] loop1: detected capacity change from 0 to 2048 [ 61.760537][ T6443] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 61.773291][ T6443] EXT4-fs error (device loop1): ext4_free_inode:354: comm syz.1.1278: bit already cleared for inode 15 [ 61.909963][ T6459] random: crng reseeded on system resumption [ 61.925061][ T6459] Restarting kernel threads ... [ 61.930360][ T6459] Done restarting kernel threads. [ 62.101194][ T6473] SELinux: security_context_str_to_sid () failed with errno=-22 [ 62.244071][ T6495] vhci_hcd: invalid port number 96 [ 62.249379][ T6495] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 62.303150][ T6503] lo speed is unknown, defaulting to 1000 [ 62.317997][ T6503] lo speed is unknown, defaulting to 1000 [ 62.326541][ T6503] lo speed is unknown, defaulting to 1000 [ 62.345543][ T6503] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 62.358960][ T6503] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 62.376901][ T6503] lo speed is unknown, defaulting to 1000 [ 62.392993][ T6503] lo speed is unknown, defaulting to 1000 [ 62.407478][ T6503] lo speed is unknown, defaulting to 1000 [ 62.413595][ T6503] lo speed is unknown, defaulting to 1000 [ 62.444986][ T6529] SELinux: failed to load policy [ 62.447059][ T6503] lo speed is unknown, defaulting to 1000 [ 62.535139][ T6544] netlink: 'syz.5.1325': attribute type 21 has an invalid length. [ 62.727594][ T6570] loop5: detected capacity change from 0 to 2048 [ 62.740187][ T6576] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 62.768091][ T6570] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.769347][ T6580] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 62.790295][ T6570] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 62.802846][ T6570] EXT4-fs (loop5): This should not happen!! Data will be lost [ 62.802846][ T6570] [ 62.812568][ T6570] EXT4-fs (loop5): Total free blocks count 0 [ 62.818649][ T6570] EXT4-fs (loop5): Free/Dirty block details [ 62.824660][ T6570] EXT4-fs (loop5): free_blocks=2415919104 [ 62.830480][ T6570] EXT4-fs (loop5): dirty_blocks=48 [ 62.835675][ T6570] EXT4-fs (loop5): Block reservation details [ 62.841790][ T6570] EXT4-fs (loop5): i_reserved_data_blocks=3 [ 63.029336][ T6606] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 63.035906][ T6606] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 63.043620][ T6606] vhci_hcd vhci_hcd.0: Device attached [ 63.060290][ T6607] vhci_hcd: connection closed [ 63.073369][ T31] vhci_hcd: stop threads [ 63.082412][ T31] vhci_hcd: release socket [ 63.087006][ T31] vhci_hcd: disconnect device [ 63.143575][ T6616] loop0: detected capacity change from 0 to 764 [ 63.200612][ T6620] vhci_hcd: invalid port number 96 [ 63.205875][ T6620] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 63.263931][ T6632] netlink: 'syz.5.1362': attribute type 1 has an invalid length. [ 63.279771][ T6632] bond1: entered promiscuous mode [ 63.285138][ T6632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.300328][ T6632] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.310269][ T6632] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 63.320703][ T6632] bond1: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 63.333114][ T6632] bond1: (slave vxcan3): making interface the new active one [ 63.340626][ T6632] vxcan3: entered promiscuous mode [ 63.347364][ T6632] bond1: (slave vxcan3): Enslaving as an active interface with an up link [ 63.364377][ T6640] loop0: detected capacity change from 0 to 512 [ 63.377142][ T6640] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 63.386407][ T6640] EXT4-fs (loop0): orphan cleanup on readonly fs [ 63.393512][ T6640] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 63.409753][ T6640] EXT4-fs (loop0): Cannot turn on quotas: error -22 [ 63.416662][ T6640] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #16: comm syz.0.1365: iget: immutable or append flags not allowed on symlinks [ 63.431372][ T6645] SELinux: failed to load policy [ 63.433490][ T6640] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1365: couldn't read orphan inode 16 (err -117) [ 63.477636][ T6649] 9pnet: Could not find request transport: Ae-p [ 63.607494][ T29] kauditd_printk_skb: 269 callbacks suppressed [ 63.607509][ T29] audit: type=1400 audit(1756489512.931:2209): avc: denied { relabelfrom } for pid=6659 comm="syz.1.1374" name="" dev="pipefs" ino=15240 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 63.636374][ T29] audit: type=1401 audit(1756489512.931:2210): op=setxattr invalid_context="" [ 63.651770][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.687461][ T6667] netlink: 'syz.5.1375': attribute type 16 has an invalid length. [ 63.695329][ T6667] netlink: 'syz.5.1375': attribute type 17 has an invalid length. [ 63.704174][ T6652] loop2: detected capacity change from 0 to 32768 [ 63.714653][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.722683][ T29] audit: type=1326 audit(1756489513.041:2211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 63.748750][ T29] audit: type=1326 audit(1756489513.071:2212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 63.772250][ T29] audit: type=1326 audit(1756489513.071:2213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 63.795887][ T29] audit: type=1326 audit(1756489513.071:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 63.819803][ T29] audit: type=1326 audit(1756489513.071:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 63.843628][ T29] audit: type=1326 audit(1756489513.071:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6670 comm="syz.3.1379" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba56d3ebe9 code=0x7ffc0000 [ 63.868147][ T6652] loop2: p1 p2 p3 < p5 p6 > [ 63.897098][ T6652] loop2: p2 size 16775168 extends beyond EOD, truncated [ 63.908455][ T6652] loop2: p5 start 4294970168 is beyond EOD, truncated [ 63.909994][ T6667] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.922533][ T6667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.935171][ T6667] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.942386][ T6667] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.197593][ T6696] loop5: detected capacity change from 0 to 1024 [ 64.201185][ T6687] bond1: left promiscuous mode [ 64.204480][ T6696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 64.208972][ T6687] vxcan3: left promiscuous mode [ 64.215569][ T6696] EXT4-fs: test_dummy_encryption option not supported [ 64.268390][ T6703] __nla_validate_parse: 15 callbacks suppressed [ 64.268406][ T6703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1391'. [ 64.311105][ T29] audit: type=1400 audit(1756489513.631:2217): avc: denied { read } for pid=6707 comm="syz.0.1394" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 64.334368][ T29] audit: type=1400 audit(1756489513.631:2218): avc: denied { open } for pid=6707 comm="syz.0.1394" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 64.473171][ T6720] program syz.2.1400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.561173][ T6727] loop2: detected capacity change from 0 to 1024 [ 64.580309][ T6727] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 64.591327][ T6727] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 64.617574][ T6727] JBD2: no valid journal superblock found [ 64.623701][ T6727] EXT4-fs (loop2): Could not load journal inode [ 64.642038][ T6727] SELinux: security_context_str_to_sid (-Xܘ7.H\ %u@) failed with errno=-22 [ 64.719018][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1410'. [ 64.757049][ T6742] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 64.794803][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 64.809372][ T145] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.809417][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1415'. [ 64.845919][ T145] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.867167][ T6751] futex_wake_op: syz.1.1413 tries to shift op by -1; fix this program [ 64.938938][ T6758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=6758 comm=syz.5.1418 [ 64.951469][ T6758] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=6758 comm=syz.5.1418 [ 65.065900][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.073280][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.156230][ T6775] netlink: 268 bytes leftover after parsing attributes in process `syz.1.1422'. [ 65.249461][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.281995][ T6755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.459300][ T6755] bond0: left promiscuous mode [ 65.464226][ T6755] bond_slave_0: left promiscuous mode [ 65.469769][ T6755] bond_slave_1: left promiscuous mode [ 65.577279][ T6755] macvlan2: left promiscuous mode [ 65.593853][ T6769] loop0: detected capacity change from 0 to 32768 [ 65.607036][ T145] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.627912][ T145] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.653241][ T145] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.673943][ T6769] loop0: p1 p3 < > [ 65.707865][ T145] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.750021][ T145] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.799935][ T145] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.119230][ T6829] netlink: 'syz.0.1443': attribute type 10 has an invalid length. [ 66.127187][ T6829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1443'. [ 66.150166][ T6829] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 66.230589][ T6851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1453'. [ 66.330010][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 66.349214][ T6864] vlan2: entered promiscuous mode [ 66.354428][ T6864] 0{X: entered promiscuous mode [ 66.488049][ T6873] loop1: detected capacity change from 0 to 1024 [ 66.507342][ T6873] EXT4-fs: Ignoring removed nobh option [ 66.512993][ T6873] EXT4-fs: Ignoring removed bh option [ 66.553981][ T6873] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 66.740361][ T6892] loop0: detected capacity change from 0 to 2048 [ 66.770229][ T6892] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 66.789946][ T6892] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 33 with error 28 [ 66.802315][ T6892] EXT4-fs (loop0): This should not happen!! Data will be lost [ 66.802315][ T6892] [ 66.811999][ T6892] EXT4-fs (loop0): Total free blocks count 0 [ 66.818012][ T6892] EXT4-fs (loop0): Free/Dirty block details [ 66.823939][ T6892] EXT4-fs (loop0): free_blocks=2415919104 [ 66.829776][ T6892] EXT4-fs (loop0): dirty_blocks=48 [ 66.834914][ T6892] EXT4-fs (loop0): Block reservation details [ 66.840987][ T6892] EXT4-fs (loop0): i_reserved_data_blocks=3 [ 67.065852][ T6928] SELinux: policydb version 0 does not match my version range 15-35 [ 67.074506][ T6923] Falling back ldisc for ttyS3. [ 67.102230][ T6928] SELinux: failed to load policy [ 67.142535][ T6936] wireguard0: entered promiscuous mode [ 67.148123][ T6936] wireguard0: entered allmulticast mode [ 67.243459][ T6946] loop9: detected capacity change from 0 to 7 [ 67.264341][ T6946] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.284487][ T6950] syz.3.1496 (6950) used greatest stack depth: 8832 bytes left [ 67.284619][ T6946] Buffer I/O error on dev loop9, logical block 0, async page read [ 67.300070][ T6946] loop9: unable to read partition table [ 67.309448][ T6952] serio: Serial port ptm0 [ 67.316033][ T6946] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 67.316033][ T6946] ) failed (rc=-5) [ 67.705440][ T6992] netlink: 'syz.2.1512': attribute type 16 has an invalid length. [ 67.713396][ T6992] netlink: 'syz.2.1512': attribute type 17 has an invalid length. [ 67.994136][ T7056] loop2: detected capacity change from 0 to 2048 [ 68.044098][ T7057] bridge_slave_0: left allmulticast mode [ 68.050193][ T7057] bridge_slave_0: left promiscuous mode [ 68.055932][ T7057] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.142248][ T7057] bridge_slave_1: left allmulticast mode [ 68.148002][ T7057] bridge_slave_1: left promiscuous mode [ 68.153669][ T7057] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.171602][ T7057] bond0: (slave bond_slave_0): Releasing backup interface [ 68.181937][ T7057] bond0: (slave bond_slave_1): Releasing backup interface [ 68.296802][ T7057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.304419][ T7057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.335282][ T7057] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.342932][ T7057] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.372366][ T7069] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 68.381185][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1521'. [ 68.390248][ T7066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1521'. [ 68.418095][ T7069] SELinux: failed to load policy [ 68.809923][ T29] kauditd_printk_skb: 129 callbacks suppressed [ 68.809942][ T29] audit: type=1326 audit(1756489518.131:2348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 68.863599][ T29] audit: type=1326 audit(1756489518.131:2349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 68.887139][ T29] audit: type=1326 audit(1756489518.131:2350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 68.910660][ T29] audit: type=1326 audit(1756489518.131:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 68.934211][ T29] audit: type=1326 audit(1756489518.131:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 68.957824][ T29] audit: type=1326 audit(1756489518.131:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 68.981315][ T29] audit: type=1326 audit(1756489518.131:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 69.005016][ T29] audit: type=1326 audit(1756489518.131:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 69.028572][ T29] audit: type=1326 audit(1756489518.131:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7092 comm="syz.1.1531" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc30619ebe9 code=0x7ffc0000 [ 69.052071][ T29] audit: type=1326 audit(1756489518.161:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7090 comm="syz.2.1532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 69.353659][ T7106] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.364137][ T7106] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.373977][ T7109] netlink: 'syz.1.1536': attribute type 16 has an invalid length. [ 69.381995][ T7109] netlink: 'syz.1.1536': attribute type 17 has an invalid length. [ 69.638005][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.645181][ T7109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.659841][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.666989][ T7109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.878612][ T7126] loop1: detected capacity change from 0 to 8192 [ 69.917881][ T7126] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.949021][ T7134] serio: Serial port ttyS3 [ 69.974159][ T7132] loop0: detected capacity change from 0 to 2048 [ 70.029162][ T7132] EXT4-fs mount: 26 callbacks suppressed [ 70.029182][ T7132] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.062577][ T7132] ext4 filesystem being mounted at /338/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.082609][ T7132] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 70.106608][ T7132] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1549: bg 0: block 345: padding at end of block bitmap is not set [ 70.127083][ T7132] EXT4-fs (loop0): Remounting filesystem read-only [ 70.296771][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.341775][ T7180] lo speed is unknown, defaulting to 1000 [ 70.380662][ T7189] __nla_validate_parse: 2 callbacks suppressed [ 70.380679][ T7189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1561'. [ 70.596521][ T7215] loop0: detected capacity change from 0 to 512 [ 70.654693][ T7215] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.729530][ T7226] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 70.808062][ T7215] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #16: comm syz.0.1571: invalid indirect mapped block 4294967295 (level 0) [ 70.835943][ T7215] EXT4-fs (loop0): Remounting filesystem read-only [ 70.844332][ T7215] EXT4-fs (loop0): 1 orphan inode deleted [ 70.850228][ T7215] EXT4-fs (loop0): 1 truncate cleaned up [ 70.856810][ T7215] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.887580][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.144705][ T7272] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1580'. [ 71.399653][ T7300] loop0: detected capacity change from 0 to 1024 [ 71.479702][ T7300] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.498672][ T7267] loop1: detected capacity change from 0 to 32768 [ 71.548973][ T7267] loop1: p1 p3 < > [ 71.553350][ T7320] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1591'. [ 71.592581][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.301427][ T7366] loop1: detected capacity change from 0 to 8192 [ 72.510282][ T7369] loop0: detected capacity change from 0 to 32768 [ 72.548748][ T7369] loop0: p1 p3 < > [ 72.796551][ T7428] netlink: 'syz.0.1621': attribute type 298 has an invalid length. [ 72.844028][ T7430] lo speed is unknown, defaulting to 1000 [ 72.847484][ T7433] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 72.879245][ T7435] loop0: detected capacity change from 0 to 512 [ 72.897401][ T7435] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.914892][ T7435] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.988339][ T7444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1628'. [ 73.114054][ T7454] IPVS: stopping backup sync thread 5028 ... [ 73.126522][ T7456] netlink: 'syz.0.1635': attribute type 3 has an invalid length. [ 73.233785][ T7462] bond1: entered promiscuous mode [ 73.239077][ T7462] bond1: entered allmulticast mode [ 73.246082][ T7462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 73.260095][ T7462] bond1 (unregistering): Released all slaves [ 73.330736][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1645'. [ 73.339751][ T7479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1645'. [ 73.350796][ T7477] serio: Serial port ptm0 [ 73.366514][ T7481] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1646'. [ 73.401615][ T7042] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.416811][ T7042] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.440927][ T7042] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.462132][ T7042] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.476721][ T7490] loop1: detected capacity change from 0 to 512 [ 73.488506][ T7490] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 73.510821][ T7490] EXT4-fs (loop1): 1 truncate cleaned up [ 73.557401][ T7490] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.587303][ T7497] Falling back ldisc for ttyS3. [ 73.627769][ T7490] pimreg: entered allmulticast mode [ 73.662547][ T7490] pimreg: left allmulticast mode [ 73.691610][ T7512] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 73.756688][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.796476][ T7521] ALSA: seq fatal error: cannot create timer (-22) [ 73.858793][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 73.867877][ T7531] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1670'. [ 73.916252][ T29] kauditd_printk_skb: 130 callbacks suppressed [ 73.916266][ T29] audit: type=1400 audit(1756489523.242:2488): avc: denied { read } for pid=7536 comm="syz.1.1673" laddr=ff02::1 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.959789][ T7540] openvswitch: netlink: Message has 6 unknown bytes. [ 74.013524][ T7545] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1676'. [ 74.111885][ T29] audit: type=1326 audit(1756489523.442:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.135443][ T29] audit: type=1326 audit(1756489523.442:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.158950][ T29] audit: type=1326 audit(1756489523.442:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.182513][ T29] audit: type=1326 audit(1756489523.442:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.206042][ T29] audit: type=1326 audit(1756489523.442:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.229510][ T29] audit: type=1326 audit(1756489523.442:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.234675][ T23] kernel write not supported for file /uhid (pid: 23 comm: kworker/1:0) [ 74.252941][ T29] audit: type=1326 audit(1756489523.442:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.253041][ T29] audit: type=1326 audit(1756489523.442:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.308192][ T29] audit: type=1326 audit(1756489523.442:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7557 comm="syz.2.1682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0511e2ebe9 code=0x7ffc0000 [ 74.341661][ T7563] loop5: detected capacity change from 0 to 512 [ 74.361896][ T7563] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.375570][ T7563] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.487066][ T7042] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.500651][ T7042] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.512381][ T7042] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.526109][ T7042] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 74.949115][ T7649] loop3: detected capacity change from 0 to 164 [ 75.032457][ T7656] loop1: detected capacity change from 0 to 2048 [ 75.049480][ T7656] Alternate GPT is invalid, using primary GPT. [ 75.056039][ T7656] loop1: p2 p3 p7 [ 75.173246][ T23] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 75.186008][ T23] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.676099][ T7746] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 75.809051][ T7764] lo speed is unknown, defaulting to 1000 [ 75.873146][ T7764] netlink: 'syz.3.1776': attribute type 6 has an invalid length. [ 75.908486][ T7771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.917560][ T7771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.979244][ T7793] loop3: detected capacity change from 0 to 512 [ 75.986695][ T7793] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.004694][ T7793] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1787: corrupted in-inode xattr: overlapping e_value [ 76.020722][ T7793] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1787: couldn't read orphan inode 15 (err -117) [ 76.033471][ T7793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.111833][ T7804] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 76.229617][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.285096][ T7823] __nla_validate_parse: 8 callbacks suppressed [ 76.285112][ T7823] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1800'. [ 76.300754][ T7823] batadv1: left allmulticast mode [ 76.305815][ T7823] batadv1: left promiscuous mode [ 76.311057][ T7823] bridge0: port 3(batadv1) entered disabled state [ 76.318992][ T7823] bridge_slave_1: left allmulticast mode [ 76.324687][ T7823] bridge_slave_1: left promiscuous mode [ 76.330653][ T7823] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.339108][ T7823] bridge_slave_0: left allmulticast mode [ 76.344818][ T7823] bridge_slave_0: left promiscuous mode [ 76.350620][ T7823] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.458746][ T7838] loop2: detected capacity change from 0 to 512 [ 76.468807][ T7838] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 76.477002][ T7838] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 76.485562][ T7838] EXT4-fs (loop2): 1 truncate cleaned up [ 76.508574][ T7838] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.623428][ T3309] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.185855][ T7917] loop3: detected capacity change from 0 to 512 [ 77.214887][ T7917] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1828: bg 0: block 16: invalid block bitmap [ 77.247217][ T7917] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 77.268062][ T7917] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #13: comm syz.3.1828: attempt to clear invalid blocks 1669132790 len 1 [ 77.296347][ T7917] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1828: invalid indirect mapped block 4294967295 (level 1) [ 77.313193][ T7917] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1828: invalid indirect mapped block 4294967295 (level 2) [ 77.330182][ T7917] EXT4-fs (loop3): 1 truncate cleaned up [ 77.336439][ T7917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.369228][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.411844][ T7943] loop1: detected capacity change from 0 to 512 [ 77.421588][ T7943] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.442608][ T7943] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1829: corrupted in-inode xattr: overlapping e_value [ 77.464816][ T7943] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1829: couldn't read orphan inode 15 (err -117) [ 77.479117][ T7943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.533385][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 77.558169][ T7961] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1832'. [ 77.956131][ T3301] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.045156][ T8025] 9pnet: Could not find request transport: tc [ 78.078241][ T8015] loop2: detected capacity change from 0 to 8192 [ 78.106684][ T8035] usb usb5: usbfs: process 8035 (syz.3.1847) did not claim interface 0 before use [ 78.409439][ T8083] loop2: detected capacity change from 0 to 512 [ 78.439180][ T8083] EXT4-fs (loop2): too many log groups per flexible block group [ 78.447050][ T8083] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 78.453609][ T8090] loop3: detected capacity change from 0 to 512 [ 78.454061][ T8083] EXT4-fs (loop2): mount failed [ 78.461086][ T8090] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.479113][ T8090] EXT4-fs (loop3): 1 truncate cleaned up [ 78.485131][ T8090] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.894765][ T8090] ================================================================== [ 78.902900][ T8090] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 78.911189][ T8090] [ 78.913513][ T8090] write to 0xffff8881007d3254 of 4 bytes by task 8099 on cpu 1: [ 78.921139][ T8090] xas_set_mark+0x12b/0x140 [ 78.925658][ T8090] __folio_start_writeback+0x1dd/0x440 [ 78.931124][ T8090] ext4_bio_write_folio+0x5ad/0x9f0 [ 78.936330][ T8090] mpage_process_page_bufs+0x4a1/0x620 [ 78.941815][ T8090] mpage_prepare_extent_to_map+0x786/0xc00 [ 78.947632][ T8090] ext4_do_writepages+0xa05/0x2750 [ 78.952769][ T8090] ext4_writepages+0x176/0x300 [ 78.957538][ T8090] do_writepages+0x1c3/0x310 [ 78.962140][ T8090] file_write_and_wait_range+0x156/0x2c0 [ 78.967783][ T8090] generic_buffers_fsync_noflush+0x45/0x120 [ 78.973680][ T8090] ext4_sync_file+0x1ab/0x690 [ 78.978380][ T8090] vfs_fsync_range+0x10d/0x130 [ 78.983237][ T8090] ext4_buffered_write_iter+0x34f/0x3c0 [ 78.988800][ T8090] ext4_file_write_iter+0xdbf/0xf00 [ 78.994016][ T8090] iter_file_splice_write+0x663/0xa60 [ 78.999386][ T8090] direct_splice_actor+0x153/0x2a0 [ 79.004501][ T8090] splice_direct_to_actor+0x30f/0x680 [ 79.009894][ T8090] do_splice_direct+0xda/0x150 [ 79.014666][ T8090] do_sendfile+0x380/0x650 [ 79.019090][ T8090] __x64_sys_sendfile64+0x105/0x150 [ 79.024296][ T8090] x64_sys_call+0x2bb0/0x2ff0 [ 79.028981][ T8090] do_syscall_64+0xd2/0x200 [ 79.033504][ T8090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.039396][ T8090] [ 79.041714][ T8090] read to 0xffff8881007d3254 of 4 bytes by task 8090 on cpu 0: [ 79.049269][ T8090] filemap_write_and_wait_range+0xfc/0x340 [ 79.055089][ T8090] filemap_invalidate_pages+0xa4/0x1a0 [ 79.060548][ T8090] kiocb_invalidate_pages+0x6e/0x80 [ 79.065742][ T8090] __iomap_dio_rw+0x5d4/0x1250 [ 79.070506][ T8090] iomap_dio_rw+0x40/0x90 [ 79.074834][ T8090] ext4_file_write_iter+0xad9/0xf00 [ 79.080063][ T8090] iter_file_splice_write+0x663/0xa60 [ 79.085433][ T8090] direct_splice_actor+0x153/0x2a0 [ 79.090630][ T8090] splice_direct_to_actor+0x30f/0x680 [ 79.095999][ T8090] do_splice_direct+0xda/0x150 [ 79.100780][ T8090] do_sendfile+0x380/0x650 [ 79.105216][ T8090] __x64_sys_sendfile64+0x105/0x150 [ 79.110430][ T8090] x64_sys_call+0x2bb0/0x2ff0 [ 79.115131][ T8090] do_syscall_64+0xd2/0x200 [ 79.119646][ T8090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.125573][ T8090] [ 79.127892][ T8090] value changed: 0x0a000021 -> 0x04000021 [ 79.133601][ T8090] [ 79.135925][ T8090] Reported by Kernel Concurrency Sanitizer on: [ 79.142092][ T8090] CPU: 0 UID: 0 PID: 8090 Comm: syz.3.1860 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.151820][ T8090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 79.162154][ T8090] ================================================================== [ 79.377268][ T3307] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.