last executing test programs: 42.799874734s ago: executing program 3 (id=3771): r0 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 42.767242725s ago: executing program 3 (id=3774): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000002c0012800c0001006d6163766c616e001c000280080001000800000040000200010000001ffe02000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0xc010) 42.673159847s ago: executing program 3 (id=3781): sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100ffffffff000000000100000008000100030000003400048005000300010000000500030000000000050003000000000005000300800000000f4357cc0000000005"], 0x58}}, 0x40000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 42.655738837s ago: executing program 3 (id=3783): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x40) 42.614467408s ago: executing program 3 (id=3784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x800000000000, 0x0, 0x0, 0x751, 0x7, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000200000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) 42.311244202s ago: executing program 3 (id=3798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x4) 42.200161373s ago: executing program 32 (id=3798): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="09000000030000000800000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000fcffff0318110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_usbip_server_init(0x4) 462.879634ms ago: executing program 4 (id=5917): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x10022}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x3806c9}]}}]}]}, 0x34}}, 0x0) 452.786874ms ago: executing program 2 (id=5919): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x1, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) 451.775624ms ago: executing program 5 (id=5920): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") sendmsg$key(r0, &(0x7f0000000400)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="020e0080150000000000000000000000030005000000000002004e24ac1e00010000000000000000030006003c000000020000fc34000000000000000000000001001800000000000800120000000200fcffffff000000000600330000000000000000000000eafffd8000000000000000000000000000aa000000000000000000000000000000000400"], 0xa8}}, 0x2) 415.466094ms ago: executing program 0 (id=5921): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[]) 415.111734ms ago: executing program 2 (id=5922): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f00000001c0)='./file0\x00') 346.719335ms ago: executing program 2 (id=5923): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x20081e, &(0x7f0000000100), 0x1, 0x502, &(0x7f0000000a00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x3920e, r0, 0x2, 0x20000000, 0x2}) 346.485086ms ago: executing program 4 (id=5924): r0 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000001"], 0x30}}, 0x44) 346.337395ms ago: executing program 0 (id=5925): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x711, @empty, 0xaffe}, {0xa, 0x4e20, 0x0, @loopback, 0x7fffffff}, r1, 0x403}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000002c0)={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 346.209166ms ago: executing program 0 (id=5926): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = memfd_secret(0x80000) fcntl$setlease(r0, 0x400, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 310.485216ms ago: executing program 4 (id=5927): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r0) 253.064297ms ago: executing program 5 (id=5929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000002305e20000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_context(r1, 0x0, 0x0) 252.891537ms ago: executing program 1 (id=5930): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) rename(0x0, 0x0) 252.785517ms ago: executing program 5 (id=5931): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000002c0)={'veth0\x00', 0xe00}) 252.600667ms ago: executing program 2 (id=5932): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000240)={[{@user_xattr}, {@abort}, {@resuid}, {@user_xattr}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@noinit_itable}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') 252.482907ms ago: executing program 1 (id=5933): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='mm_page_free\x00', r0}, 0x10) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x80000000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 250.839637ms ago: executing program 0 (id=5934): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000040)="f5", 0x1) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e1e, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1b) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 218.365397ms ago: executing program 4 (id=5935): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @multicast1}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000000)=[@in={0x2, 0x0, @loopback}], 0x10) 217.868447ms ago: executing program 0 (id=5936): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r0}, 0x18) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x5, 0xfc, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 209.100668ms ago: executing program 1 (id=5937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) 162.606018ms ago: executing program 0 (id=5938): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000180)=0x2) 162.374358ms ago: executing program 4 (id=5939): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 162.147718ms ago: executing program 5 (id=5940): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 161.809198ms ago: executing program 1 (id=5941): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 110.644799ms ago: executing program 4 (id=5942): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x10c) msgrcv(r0, 0x0, 0x0, 0x3, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1}, 0x0, 0x0, 0x800000000000000, 0x7, 0x2, 0x2, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) 87.655979ms ago: executing program 5 (id=5943): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r0, 0x0) stat(&(0x7f0000022200)='./file0\x00', 0x0) syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x10, 0x1}, 0x0, 0x0) 25.00381ms ago: executing program 1 (id=5944): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 24.75965ms ago: executing program 2 (id=5945): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 15.58038ms ago: executing program 1 (id=5946): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0500000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70040000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) 13.04434ms ago: executing program 5 (id=5947): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp437'}}]}, 0x1, 0x203, &(0x7f00000006c0)="$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") unshare(0x62000000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 0s ago: executing program 2 (id=5948): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x1, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_setup(0x6, &(0x7f0000001000)=0x0) io_getevents(r0, 0x3, 0x3, &(0x7f00000010c0)=[{}, {}, {}], &(0x7f0000001140)={0x0, 0x3938700}) kernel console output (not intermixed with test programs): E with no NLM_F_CREATE or NLM_F_REPLACE [ 74.146689][T10873] IPv6: NLM_F_CREATE should be set when creating new route [ 74.153900][T10873] IPv6: NLM_F_CREATE should be set when creating new route [ 74.163179][T10873] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.409849][T10918] __nla_validate_parse: 4 callbacks suppressed [ 74.409864][T10918] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3518'. [ 74.517877][T10932] netlink: 'syz.0.3525': attribute type 4 has an invalid length. [ 74.525664][T10932] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3525'. [ 74.809153][ T3386] net_ratelimit: 1 callbacks suppressed [ 74.809167][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.979990][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.061264][T11053] netem: change failed [ 75.084519][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.092417][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.100267][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.108148][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.116049][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.123856][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.131679][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.139449][T11058] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 75.513605][T11099] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 75.544260][T11103] netlink: 'syz.3.3589': attribute type 6 has an invalid length. [ 75.567446][T11105] loop3: detected capacity change from 0 to 1024 [ 75.576012][T11105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.598079][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.614678][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3591'. [ 75.671228][T11121] random: crng reseeded on system resumption [ 75.681108][T11121] Restarting kernel threads ... [ 75.686170][T11121] Done restarting kernel threads. [ 75.945852][T11164] loop0: detected capacity change from 0 to 512 [ 75.953636][T11164] journal_path: Non-blockdev passed as './file0' [ 75.960073][T11164] EXT4-fs: error: could not find journal device path [ 76.037279][T11182] random: crng reseeded on system resumption [ 76.052950][T11184] loop2: detected capacity change from 0 to 512 [ 76.061142][T11184] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.3622: bad orphan inode 11 [ 76.073406][T11184] ext4_test_bit(bit=10, block=4) = 1 [ 76.078715][T11184] is_bad_inode(inode)=0 [ 76.080120][T11190] loop3: detected capacity change from 0 to 512 [ 76.082885][T11184] NEXT_ORPHAN(inode)=2080374784 [ 76.082894][T11184] max_ino=32 [ 76.082900][T11184] i_nlink=0 [ 76.082993][T11184] EXT4-fs (loop2): 1 truncate cleaned up [ 76.107776][T11190] EXT4-fs (loop3): orphan cleanup on readonly fs [ 76.107788][T11184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.114952][T11190] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3624: bg 0: block 248: padding at end of block bitmap is not set [ 76.141697][T11190] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.3624: Failed to acquire dquot type 1 [ 76.156406][T11190] EXT4-fs (loop3): 1 truncate cleaned up [ 76.167149][T11190] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 76.191642][T11199] loop0: detected capacity change from 0 to 512 [ 76.201262][T11199] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3627: casefold flag without casefold feature [ 76.216227][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.218124][T11199] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3627: couldn't read orphan inode 15 (err -117) [ 76.237286][T11190] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 76.242674][T11199] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.272964][T11190] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 76.289548][T11190] syz.3.3624 (11190) used greatest stack depth: 9304 bytes left [ 76.323853][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.359679][T11224] loop3: detected capacity change from 0 to 128 [ 76.375469][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.453372][ T3400] kernel write not supported for file /sg0 (pid: 3400 comm: kworker/1:6) [ 76.477358][T11255] SELinux: Context Ü is not valid (left unmapped). [ 76.484078][T11255] SELinux: Context attr/fscr is not valid (left unmapped). [ 76.555417][T11273] sctp: [Deprecated]: syz.1.3650 (pid 11273) Use of int in maxseg socket option. [ 76.555417][T11273] Use struct sctp_assoc_value instead [ 76.696330][T11300] loop1: detected capacity change from 0 to 2048 [ 76.711741][T11308] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 76.718272][T11308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.725884][T11308] vhci_hcd vhci_hcd.0: Device attached [ 76.740710][T11309] vhci_hcd: connection closed [ 76.740878][ T12] vhci_hcd: stop threads [ 76.749920][ T12] vhci_hcd: release socket [ 76.754331][ T12] vhci_hcd: disconnect device [ 76.768162][T11300] EXT4-fs (loop1): failed to initialize system zone (-117) [ 76.775694][T11300] EXT4-fs (loop1): mount failed [ 76.811959][T11324] netlink: 'syz.3.3671': attribute type 1 has an invalid length. [ 76.877058][T11338] loop3: detected capacity change from 0 to 128 [ 76.895223][T11338] syz.3.3679: attempt to access beyond end of device [ 76.895223][T11338] loop3: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 76.938329][T11349] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3683'. [ 77.012381][T11367] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3691'. [ 77.143989][T11379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'. [ 77.321041][T11406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3709'. [ 77.331442][T11406] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3709'. [ 77.426828][T11450] SELinux: failed to load policy [ 77.447335][T11454] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3721'. [ 77.514511][T11470] program syz.2.3729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 77.539831][T11473] serio: Serial port ptm0 [ 77.795607][T11501] serio: Serial port ttyS3 [ 77.939033][T11511] loop1: detected capacity change from 0 to 128 [ 77.945902][T11511] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 77.958178][T11511] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.983767][ T51] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 77.997035][T11516] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3745'. [ 78.064697][T11537] loop4: detected capacity change from 0 to 128 [ 78.120385][T11546] loop3: detected capacity change from 0 to 128 [ 78.134415][T11546] syz.3.3755: attempt to access beyond end of device [ 78.134415][T11546] loop3: rw=2049, sector=129, nr_sectors = 8 limit=128 [ 78.148485][T11546] syz.3.3755: attempt to access beyond end of device [ 78.148485][T11546] loop3: rw=2049, sector=145, nr_sectors = 8 limit=128 [ 78.162139][T11546] syz.3.3755: attempt to access beyond end of device [ 78.162139][T11546] loop3: rw=2049, sector=161, nr_sectors = 1 limit=128 [ 78.237205][T11557] hsr0: entered promiscuous mode [ 78.317727][T11571] IPv6: Can't replace route, no match found [ 78.381770][T11579] SELinux: failed to load policy [ 78.503360][T11598] dummy0: entered promiscuous mode [ 78.516126][T11598] dummy0: left promiscuous mode [ 78.607493][T11621] loop4: detected capacity change from 0 to 512 [ 78.614929][T11621] EXT4-fs: Ignoring removed nomblk_io_submit option [ 78.623266][T11621] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 78.648112][T11621] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 78.678199][T11621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002] [ 78.712201][T11621] System zones: 0-2, 18-18, 34-34 [ 78.718856][T11621] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.3782: iget: bad i_size value: 360287970189639680 [ 78.752815][T11621] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3782: couldn't read orphan inode 15 (err -117) [ 78.776537][T11621] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.819720][T11646] netlink: 'syz.0.3792': attribute type 2 has an invalid length. [ 78.827498][T11646] netlink: 'syz.0.3792': attribute type 5 has an invalid length. [ 78.837054][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.884836][ T29] kauditd_printk_skb: 505 callbacks suppressed [ 78.884851][ T29] audit: type=1400 audit(1753069973.838:8936): avc: denied { setopt } for pid=11653 comm="syz.4.3795" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.914429][ T29] audit: type=1400 audit(1753069973.838:8937): avc: denied { read } for pid=11653 comm="syz.4.3795" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.961281][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.983216][ T29] audit: type=1400 audit(1753069973.903:8938): avc: denied { bind } for pid=11659 comm="syz.4.3799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.003338][ T29] audit: type=1400 audit(1753069973.903:8939): avc: denied { name_bind } for pid=11659 comm="syz.4.3799" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.011270][T11656] xt_CT: You must specify a L4 protocol and not use inversions on it [ 79.025291][ T29] audit: type=1400 audit(1753069973.903:8940): avc: denied { node_bind } for pid=11659 comm="syz.4.3799" saddr=172.20.20.170 src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 79.108454][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.125698][ T29] audit: type=1400 audit(1753069973.922:8941): avc: denied { getopt } for pid=11659 comm="syz.4.3799" laddr=172.20.20.170 lport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.167643][ T29] audit: type=1400 audit(1753069974.090:8942): avc: denied { mounton } for pid=11678 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 79.189603][ T29] audit: type=1400 audit(1753069974.118:8943): avc: denied { sys_module } for pid=11678 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 79.214083][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.246752][ T29] audit: type=1400 audit(1753069974.174:8944): avc: denied { create } for pid=11687 comm="syz.0.3809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.268751][ T29] audit: type=1400 audit(1753069974.193:8945): avc: denied { ioctl } for pid=11687 comm="syz.0.3809" path="socket:[29891]" dev="sockfs" ino=29891 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 79.301375][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.394487][T11708] tun0: tun_chr_ioctl cmd 2147767507 [ 79.419393][ T51] bridge_slave_1: left allmulticast mode [ 79.425099][ T51] bridge_slave_1: left promiscuous mode [ 79.430792][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.438674][ T51] bridge_slave_0: left allmulticast mode [ 79.444361][ T51] bridge_slave_0: left promiscuous mode [ 79.450053][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.527880][T11758] loop2: detected capacity change from 0 to 1024 [ 79.535835][T11758] EXT4-fs: inline encryption not supported [ 79.541732][T11758] EXT4-fs: Ignoring removed bh option [ 79.549005][T11758] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 79.567624][T11758] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.589903][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.614038][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.631608][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.644903][ T51] bond0 (unregistering): Released all slaves [ 79.654900][ T51] bond1 (unregistering): Released all slaves [ 79.657711][T11779] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11779 comm=syz.2.3831 [ 79.766189][ T51] hsr_slave_0: left promiscuous mode [ 79.786598][ T51] hsr_slave_1: left promiscuous mode [ 79.794438][T11898] loop1: detected capacity change from 0 to 512 [ 79.803403][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.810848][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.810898][T11900] loop4: detected capacity change from 0 to 128 [ 79.824498][T11898] vfat: Unknown parameter '01777777777777777777777' [ 79.831756][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.839235][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.852334][ T51] veth1_macvtap: left promiscuous mode [ 79.857966][ T51] veth0_macvtap: left promiscuous mode [ 79.863685][ T51] veth1_vlan: left promiscuous mode [ 79.869142][ T51] veth0_vlan: left promiscuous mode [ 79.971309][ T51] team0 (unregistering): Port device team_slave_1 removed [ 80.004100][ T51] team0 (unregistering): Port device C removed [ 80.053455][T11678] chnl_net:caif_netlink_parms(): no params data found [ 80.110781][T11678] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.118224][T11678] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.142070][T11678] bridge_slave_0: entered allmulticast mode [ 80.149816][T11678] bridge_slave_0: entered promiscuous mode [ 80.150356][T11992] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=11992 comm=syz.2.3847 [ 80.156852][T11678] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.175279][T11678] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.182678][T11678] bridge_slave_1: entered allmulticast mode [ 80.189427][T11678] bridge_slave_1: entered promiscuous mode [ 80.214439][T11678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.223657][T12022] netlink: 'syz.1.3850': attribute type 1 has an invalid length. [ 80.232424][T11678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.265227][T11678] team0: Port device team_slave_0 added [ 80.282589][T11678] team0: Port device team_slave_1 added [ 80.311368][T11678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.318375][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.344311][T11678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.355787][T11678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.362778][T11678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.388725][T11678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.402304][ T3386] net_ratelimit: 58 callbacks suppressed [ 80.402315][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.501348][T11678] hsr_slave_0: entered promiscuous mode [ 80.501851][T12123] loop0: detected capacity change from 0 to 256 [ 80.513524][T11678] hsr_slave_1: entered promiscuous mode [ 80.529992][T11678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.537623][T11678] Cannot create hsr debugfs directory [ 80.716726][T11678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 80.726902][T11678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 80.738747][T11678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 80.771936][T11678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 80.782319][T12234] openvswitch: netlink: Message has 6 unknown bytes. [ 80.872279][T11678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.906143][T11678] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.917694][T12260] loop1: detected capacity change from 0 to 1024 [ 80.926507][T12258] smc: net device bond0 applied user defined pnetid SYZ2 [ 80.934426][ T3322] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.941585][ T3322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.950869][T12258] smc: net device bond0 erased user defined pnetid SYZ2 [ 80.958497][T12260] EXT4-fs: Ignoring removed nobh option [ 80.964100][T12260] EXT4-fs: Ignoring removed bh option [ 80.978275][ T3322] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.985356][ T3322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.009729][T12260] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.015520][T11678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.055788][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.108755][T12278] process 'syz.1.3887' launched './file0' with NULL argv: empty string added [ 81.123034][T11678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.314498][T11678] veth0_vlan: entered promiscuous mode [ 81.323271][T11678] veth1_vlan: entered promiscuous mode [ 81.340019][T11678] veth0_macvtap: entered promiscuous mode [ 81.360025][T11678] veth1_macvtap: entered promiscuous mode [ 81.374262][T11678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.386348][T11678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.396989][T11678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.405879][T11678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.414573][T11678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.423388][T11678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.479962][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.491068][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.776174][T12387] loop4: detected capacity change from 0 to 256 [ 81.785992][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.796168][T12387] FAT-fs (loop4): Filesystem has been set read-only [ 81.804233][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.814410][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.824586][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.840791][T12394] loop0: detected capacity change from 0 to 256 [ 81.848326][T12394] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.859721][T12394] FAT-fs (loop0): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 81.868278][T12394] FAT-fs (loop0): Filesystem has been set read-only [ 81.874951][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.885134][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.895281][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.906058][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.916938][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 81.929733][T12387] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 198, start 00000006) [ 82.179938][T12417] loop1: detected capacity change from 0 to 2048 [ 82.196693][T12417] EXT4-fs (loop1): failed to initialize system zone (-117) [ 82.204026][T12417] EXT4-fs (loop1): mount failed [ 82.351897][T12439] bridge_slave_0: default FDB implementation only supports local addresses [ 82.376240][T12442] __nla_validate_parse: 7 callbacks suppressed [ 82.376253][T12442] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3926'. [ 82.438980][T12449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.462177][T12449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.471937][T12453] SELinux: syz.1.3930 (12453) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 82.592455][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.801503][T12469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.809782][T12469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.818127][T12469] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.827155][T12468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.835336][T12468] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.036441][T12491] netlink: 'syz.5.3946': attribute type 1 has an invalid length. [ 83.263490][T12538] netlink: 'syz.0.3957': attribute type 1 has an invalid length. [ 83.408600][T12566] loop5: detected capacity change from 0 to 1024 [ 83.417704][T12566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.431500][T12566] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.588085][T12594] loop5: detected capacity change from 0 to 512 [ 83.599068][T12594] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.611695][T12594] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 83.624736][T12594] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.3981: corrupted inode contents [ 83.636959][T12594] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.3981: mark_inode_dirty error [ 83.648650][T12594] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.3981: corrupted inode contents [ 83.662087][T12594] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3981: mark_inode_dirty error [ 83.675092][T12601] xt_hashlimit: max too large, truncated to 1048576 [ 83.678227][T12594] EXT4-fs warning (device loop5): ext4_empty_dir:3086: inode #18: comm syz.5.3981: directory missing '.' [ 83.708392][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.768138][T12618] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12618 comm=syz.1.3989 [ 83.806697][T12620] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3992'. [ 83.824955][T12623] loop1: detected capacity change from 0 to 1024 [ 83.857288][T12623] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.877293][T12639] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3998'. [ 83.932898][T12623] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4113: comm syz.1.3990: Allocating blocks 497-513 which overlap fs metadata [ 83.986597][T12623] EXT4-fs (loop1): pa ffff888106a384d0: logic 1, phys. 129, len 24 [ 83.994701][T12623] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 1 [ 84.054957][T12663] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 84.070272][ T3308] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.162092][T12705] 9pnet_fd: Insufficient options for proto=fd [ 84.239471][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 84.239485][ T29] audit: type=1400 audit(1753069978.842:9133): avc: denied { write } for pid=12724 comm="syz.0.4023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.320712][ T29] audit: type=1400 audit(1753069978.870:9134): avc: denied { append } for pid=12732 comm="syz.2.4027" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 84.344604][ T29] audit: type=1400 audit(1753069978.908:9135): avc: denied { create } for pid=12734 comm="syz.0.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.365019][ T29] audit: type=1400 audit(1753069978.917:9136): avc: denied { write } for pid=12734 comm="syz.0.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.385825][ T29] audit: type=1400 audit(1753069978.917:9137): avc: denied { nlmsg_write } for pid=12734 comm="syz.0.4029" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 84.416360][T12742] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4032'. [ 84.494759][T12749] Falling back ldisc for ttyS3. [ 84.629003][ T29] audit: type=1400 audit(1753069979.207:9138): avc: denied { bind } for pid=12783 comm="syz.0.4047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.674858][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 84.684316][T12800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4054'. [ 84.711969][ T29] audit: type=1326 audit(1753069979.272:9139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.4.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260691e9a9 code=0x7ffc0000 [ 84.735657][ T29] audit: type=1326 audit(1753069979.272:9140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.4.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260691e9a9 code=0x7ffc0000 [ 84.760078][ T29] audit: type=1326 audit(1753069979.272:9141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.4.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f260691e9a9 code=0x7ffc0000 [ 84.783744][ T29] audit: type=1326 audit(1753069979.272:9142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12787 comm="syz.4.4052" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f260691e9a9 code=0x7ffc0000 [ 84.858585][T12816] serio: Serial port ptm0 [ 84.966693][T12845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4074'. [ 85.033628][T12859] loop4: detected capacity change from 0 to 512 [ 85.043680][T12859] journal_path: Lookup failure for './file0/../file0' [ 85.050509][T12859] EXT4-fs: error: could not find journal device path [ 85.241251][T12914] serio: Serial port ptm0 [ 85.556217][T12969] random: crng reseeded on system resumption [ 85.578130][T12971] loop4: detected capacity change from 0 to 512 [ 85.597142][T12971] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.610395][T12971] ext4 filesystem being mounted at /834/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.712221][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.792750][T12990] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 85.798832][T12990] syzkaller1: linktype set to 768 [ 85.938055][ T3386] net_ratelimit: 3 callbacks suppressed [ 85.938096][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.977353][T13020] loop4: detected capacity change from 0 to 512 [ 85.994060][T13020] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.007144][T13020] ext4 filesystem being mounted at /850/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.042462][T13020] EXT4-fs (loop4): shut down requested (2) [ 86.059499][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.162376][T13047] loop4: detected capacity change from 0 to 256 [ 86.203993][T13058] netlink: 268 bytes leftover after parsing attributes in process `syz.4.4159'. [ 86.274308][T13066] loop4: detected capacity change from 0 to 512 [ 86.293054][T13066] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.322968][T13066] ext4 filesystem being mounted at /857/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.361547][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.603092][T13136] loop2: detected capacity change from 0 to 512 [ 86.640152][T13136] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.653849][T13136] ext4 filesystem being mounted at /813/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 86.668562][T13136] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4189: bg 0: block 145: padding at end of block bitmap is not set [ 86.709934][ T3311] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.755409][T13149] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4192'. [ 86.823646][ T3379] kernel write not supported for file /uhid (pid: 3379 comm: kworker/1:3) [ 86.861875][T13156] loop1: detected capacity change from 0 to 764 [ 86.890100][T13156] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 86.954131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 86.966661][ T5261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.974960][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.041801][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4204'. [ 87.051116][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.398464][T13229] netlink: 'syz.1.4224': attribute type 1 has an invalid length. [ 87.595384][T13248] netlink: 'syz.2.4233': attribute type 1 has an invalid length. [ 87.619404][T13250] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 87.714557][T13268] loop2: detected capacity change from 0 to 128 [ 87.722745][T13268] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 87.738219][T13268] ext4 filesystem being mounted at /832/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.761319][ T3311] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.065428][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.147200][T13322] loop5: detected capacity change from 0 to 8192 [ 88.153911][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.197630][T13337] bridge_slave_0: invalid flags given to default FDB implementation [ 88.466265][T13368] loop1: detected capacity change from 0 to 1024 [ 88.521914][T13376] loop1: detected capacity change from 0 to 128 [ 88.547433][T13383] __nla_validate_parse: 1 callbacks suppressed [ 88.547468][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4288'. [ 88.650128][T13366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.658606][T13366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.714730][ T41] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.759063][T13399] netlink: 14593 bytes leftover after parsing attributes in process `syz.5.4295'. [ 88.780332][ T41] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.837202][ T41] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.881204][ T41] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.940057][T13400] chnl_net:caif_netlink_parms(): no params data found [ 88.999547][ T41] bridge_slave_1: left allmulticast mode [ 89.005349][ T41] bridge_slave_1: left promiscuous mode [ 89.011825][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.020626][ T41] bridge_slave_0: left allmulticast mode [ 89.026325][ T41] bridge_slave_0: left promiscuous mode [ 89.032634][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.178946][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.188920][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.198424][ T41] bond0 (unregistering): Released all slaves [ 89.210183][T13400] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.217352][T13400] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.229863][T13400] bridge_slave_0: entered allmulticast mode [ 89.237947][T13400] bridge_slave_0: entered promiscuous mode [ 89.247128][T13590] team0: No ports can be present during mode change [ 89.253870][T13400] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.260943][T13400] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.268315][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.268543][T13400] bridge_slave_1: entered allmulticast mode [ 89.283076][T13400] bridge_slave_1: entered promiscuous mode [ 89.306612][ T41] hsr_slave_0: left promiscuous mode [ 89.312987][T13624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4307'. [ 89.320834][ T41] hsr_slave_1: left promiscuous mode [ 89.330760][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.338351][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.350990][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.358450][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.383939][ T41] veth1_macvtap: left promiscuous mode [ 89.386057][T13636] loop4: detected capacity change from 0 to 256 [ 89.390132][ T41] veth0_macvtap: left promiscuous mode [ 89.415333][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.424183][T13636] FAT-fs (loop4): Filesystem has been set read-only [ 89.430926][T13641] loop5: detected capacity change from 0 to 512 [ 89.430955][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.445976][ T41] veth1_vlan: left promiscuous mode [ 89.446039][ T41] veth0_vlan: left promiscuous mode [ 89.460627][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.469540][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.476552][T13641] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.478393][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.514554][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.536421][T13641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.541512][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.553648][T13641] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.585204][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.594184][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.603084][T13636] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 89.622658][T13641] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 89.638692][ T41] team0 (unregistering): Port device team_slave_1 removed [ 89.660901][T13641] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32768 with max blocks 23 with error 28 [ 89.673575][T13641] EXT4-fs (loop5): This should not happen!! Data will be lost [ 89.673575][T13641] [ 89.683274][T13641] EXT4-fs (loop5): Total free blocks count 0 [ 89.689321][T13641] EXT4-fs (loop5): Free/Dirty block details [ 89.695423][T13641] EXT4-fs (loop5): free_blocks=39626 [ 89.700816][T13641] EXT4-fs (loop5): dirty_blocks=23 [ 89.705979][T13641] EXT4-fs (loop5): Block reservation details [ 89.712028][T13641] EXT4-fs (loop5): i_reserved_data_blocks=23 [ 89.718526][ T41] team0 (unregistering): Port device team_slave_0 removed [ 89.742167][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.764912][T13400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.788013][T13400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.820164][T13400] team0: Port device team_slave_0 added [ 89.835605][T13400] team0: Port device team_slave_1 added [ 89.867417][T13400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.874417][T13400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.900396][T13400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.914676][T13400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.921706][T13400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.947704][T13400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.986620][T13400] hsr_slave_0: entered promiscuous mode [ 90.000897][T13400] hsr_slave_1: entered promiscuous mode [ 90.012694][T13400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.020926][T13400] Cannot create hsr debugfs directory [ 90.195494][ T29] kauditd_printk_skb: 93 callbacks suppressed [ 90.195508][ T29] audit: type=1400 audit(1753069984.417:9236): avc: denied { read write } for pid=13826 comm="syz.5.4323" name="usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.225608][ T29] audit: type=1400 audit(1753069984.417:9237): avc: denied { open } for pid=13826 comm="syz.5.4323" path="/dev/usbmon9" dev="devtmpfs" ino=169 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 90.292341][ T29] audit: type=1400 audit(1753069984.501:9238): avc: denied { create } for pid=13830 comm="syz.5.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.311953][ T29] audit: type=1400 audit(1753069984.501:9239): avc: denied { setopt } for pid=13830 comm="syz.5.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.343026][ T29] audit: type=1400 audit(1753069984.501:9240): avc: denied { write } for pid=13830 comm="syz.5.4325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 90.375594][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.395079][T13832] xt_hashlimit: max too large, truncated to 1048576 [ 90.419717][ T29] audit: type=1326 audit(1753069984.604:9241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 90.443301][ T29] audit: type=1326 audit(1753069984.604:9242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 90.467019][ T29] audit: type=1326 audit(1753069984.604:9243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 90.490604][ T29] audit: type=1326 audit(1753069984.613:9244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 90.514267][ T29] audit: type=1326 audit(1753069984.613:9245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13838 comm="syz.0.4327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 90.552488][T13848] autofs4:pid:13848:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(24.11), cmd(0xc018937e) [ 90.565953][T13848] autofs4:pid:13848:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 90.668428][T13860] random: crng reseeded on system resumption [ 90.677999][T13869] loop4: detected capacity change from 0 to 512 [ 90.701980][T13400] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.710806][T13869] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 90.710876][T13400] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.727295][T13869] EXT4-fs (loop4): orphan cleanup on readonly fs [ 90.735371][T13400] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.743520][T13869] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.4335: corrupted inode contents [ 90.774078][T13869] EXT4-fs (loop4): Remounting filesystem read-only [ 90.780826][T13869] EXT4-fs (loop4): 1 truncate cleaned up [ 90.786480][T13400] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.794381][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.805148][ T41] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 90.817532][ T41] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 90.828671][T13869] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 90.856360][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.875425][T13400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.906661][T13400] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.918889][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.926062][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.941179][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.948341][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.986331][T13911] openvswitch: netlink: Message has 6 unknown bytes. [ 91.042616][T13400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.058374][T13919] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4345'. [ 91.138144][T13400] veth0_vlan: entered promiscuous mode [ 91.155663][T13400] veth1_vlan: entered promiscuous mode [ 91.170136][T13400] veth0_macvtap: entered promiscuous mode [ 91.177847][T13400] veth1_macvtap: entered promiscuous mode [ 91.187880][T13400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.198529][T13400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.207690][T13400] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.216545][T13400] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.225345][T13400] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.234146][T13400] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.315479][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.332637][T13949] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4356'. [ 91.487330][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.628195][T13982] loop7: detected capacity change from 0 to 7 [ 91.634724][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.643928][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.652542][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.661731][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.669598][T13982] loop7: unable to read partition table [ 91.675297][T13982] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 91.694592][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.703776][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.712831][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 91.722023][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 91.729894][T13988] loop7: unable to read partition table [ 91.744307][ T5261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.541523][T14082] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4412'. [ 92.551017][T14082] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 92.597021][T14090] loop5: detected capacity change from 0 to 512 [ 92.603450][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.632764][T14090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.645552][T14090] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 92.665924][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.923214][T14140] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4435'. [ 93.434900][T14188] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4456'. [ 93.572770][T14201] loop5: detected capacity change from 0 to 128 [ 93.652861][T14209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4463'. [ 93.661820][T14209] netlink: 'syz.1.4463': attribute type 5 has an invalid length. [ 93.669555][T14209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4463'. [ 93.672913][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.680637][T14209] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 93.687814][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.695464][T14209] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 93.711876][T14209] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 93.720505][T14209] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 93.724660][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.724660][ T51] loop5: rw=1, sector=145, nr_sectors = 16 limit=128 [ 93.729755][T14209] geneve2: entered promiscuous mode [ 93.742790][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.747741][T14209] geneve2: entered allmulticast mode [ 93.751208][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.751208][ T51] loop5: rw=1, sector=169, nr_sectors = 8 limit=128 [ 93.774786][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.774786][ T51] loop5: rw=1, sector=185, nr_sectors = 8 limit=128 [ 93.788169][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.788169][ T51] loop5: rw=1, sector=201, nr_sectors = 8 limit=128 [ 93.801822][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.801822][ T51] loop5: rw=1, sector=217, nr_sectors = 8 limit=128 [ 93.819691][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.819691][ T51] loop5: rw=1, sector=233, nr_sectors = 8 limit=128 [ 93.834747][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.834747][ T51] loop5: rw=1, sector=249, nr_sectors = 8 limit=128 [ 93.848157][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.848157][ T51] loop5: rw=1, sector=265, nr_sectors = 8 limit=128 [ 93.861639][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.861639][ T51] loop5: rw=1, sector=281, nr_sectors = 8 limit=128 [ 93.875129][ T51] kworker/u8:3: attempt to access beyond end of device [ 93.875129][ T51] loop5: rw=1, sector=297, nr_sectors = 8 limit=128 [ 93.930040][T14225] program syz.1.4468 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.960434][T14231] loop2: detected capacity change from 0 to 256 [ 93.968166][T14231] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 93.980449][T14231] FAT-fs (loop2): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 93.989067][T14231] FAT-fs (loop2): Filesystem has been set read-only [ 94.131460][T14250] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4478'. [ 94.175338][T14260] macvtap1: entered allmulticast mode [ 94.180846][T14260] veth0_macvtap: entered allmulticast mode [ 94.226124][T14276] random: crng reseeded on system resumption [ 94.326526][T14295] loop2: detected capacity change from 0 to 1024 [ 94.339269][T14297] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 94.354412][T14295] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.368888][T14295] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.402646][T14309] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.417582][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.443848][T14316] loop2: detected capacity change from 0 to 1024 [ 94.453743][T14321] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4508'. [ 94.460972][T14316] EXT4-fs: Ignoring removed nomblk_io_submit option [ 94.484457][T14324] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 94.491826][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.493947][T14316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.513837][T14324] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 94.555969][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.576036][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.657766][T14349] Invalid ELF header magic: != ELF [ 94.670853][T14353] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4519'. [ 94.712539][T14347] loop1: detected capacity change from 0 to 8192 [ 94.725848][T14361] loop2: detected capacity change from 0 to 128 [ 94.744763][T14361] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 94.760538][T14361] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.771821][T14361] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 94.793348][T13400] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.824228][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.981183][T14417] loop1: detected capacity change from 0 to 512 [ 95.032882][T14436] loop4: detected capacity change from 0 to 2048 [ 95.048043][T14436] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.075130][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.117763][T14451] erspan0: entered promiscuous mode [ 95.176551][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.205515][T14464] loop4: detected capacity change from 0 to 2048 [ 95.231341][T14464] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.243610][T14472] SELinux: failed to load policy [ 95.269719][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.323882][T14494] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4570'. [ 95.709471][T14536] 9pnet: Could not find request transport: r [ 95.739877][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 95.739892][ T29] audit: type=1326 audit(1753069989.590:9349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.769941][ T29] audit: type=1326 audit(1753069989.590:9350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.793473][ T29] audit: type=1326 audit(1753069989.590:9351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=191 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.816975][ T29] audit: type=1326 audit(1753069989.590:9352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.840530][ T29] audit: type=1326 audit(1753069989.590:9353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.864698][ T29] audit: type=1326 audit(1753069989.590:9354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.888261][ T29] audit: type=1326 audit(1753069989.590:9355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.911739][ T29] audit: type=1326 audit(1753069989.609:9356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14540 comm="syz.0.4589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 95.935642][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.952297][T14549] xt_TPROXY: Can be used only with -p tcp or -p udp [ 95.980130][ T29] audit: type=1326 audit(1753069989.824:9357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14553 comm="syz.0.4595" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f97dfdee9a9 code=0x0 [ 96.044290][T14562] tap0: tun_chr_ioctl cmd 1074812118 [ 96.131642][ T29] audit: type=1326 audit(1753069989.964:9358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14570 comm="syz.2.4601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a45a9e9a9 code=0x7ffc0000 [ 96.301809][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 96.310853][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 96.320012][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 96.334976][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 96.343963][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 96.352969][T14588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4609'. [ 96.388481][T14593] netlink: 'syz.1.4610': attribute type 1 has an invalid length. [ 96.414005][T14599] siw: device registration error -23 [ 96.494785][T14611] loop1: detected capacity change from 0 to 2048 [ 96.579456][T14633] loop1: detected capacity change from 0 to 2048 [ 96.598149][T14640] netlink: 'syz.2.4630': attribute type 1 has an invalid length. [ 96.681204][T14658] ALSA: seq fatal error: cannot create timer (-19) [ 96.728476][T14667] loop2: detected capacity change from 0 to 512 [ 96.747427][T14667] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a856c0a8, mo2=0002] [ 96.755480][T14667] System zones: 0-2, 18-18, 34-35 [ 96.761422][T14667] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.773964][T14667] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.797481][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.990396][T14715] loop2: detected capacity change from 0 to 256 [ 97.045633][ T3379] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.054262][T14730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 97.060853][T14730] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.068705][T14730] vhci_hcd vhci_hcd.0: Device attached [ 97.078436][T14730] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 97.089964][T14730] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(7) [ 97.096492][T14730] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 97.103915][T14730] vhci_hcd vhci_hcd.0: Device attached [ 97.129988][T14730] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(9) [ 97.136584][T14730] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 97.144221][T14730] vhci_hcd vhci_hcd.0: Device attached [ 97.154100][T14739] vhci_hcd: connection closed [ 97.154358][T14737] vhci_hcd: connection closed [ 97.155283][ T51] vhci_hcd: stop threads [ 97.159173][T14731] vhci_hcd: connection closed [ 97.163742][ T51] vhci_hcd: release socket [ 97.163752][ T51] vhci_hcd: disconnect device [ 97.184891][T14743] ALSA: seq fatal error: cannot create timer (-19) [ 97.192571][ T51] vhci_hcd: stop threads [ 97.196968][ T51] vhci_hcd: release socket [ 97.201383][ T51] vhci_hcd: disconnect device [ 97.214437][ T51] vhci_hcd: stop threads [ 97.218966][ T51] vhci_hcd: release socket [ 97.223789][ T51] vhci_hcd: disconnect device [ 97.245373][T14752] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 97.251959][T14752] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 97.259797][T14752] vhci_hcd vhci_hcd.0: Device attached [ 97.266350][T14753] vhci_hcd: connection closed [ 97.266504][ T51] vhci_hcd: stop threads [ 97.275563][ T51] vhci_hcd: release socket [ 97.280074][ T51] vhci_hcd: disconnect device [ 97.280479][ T5261] vhci_hcd: vhci_device speed not set [ 97.381712][T14782] loop2: detected capacity change from 0 to 2048 [ 97.388708][T14782] EXT4-fs: Ignoring removed bh option [ 97.399217][T14782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.411778][T14782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.439006][ T3379] Process accounting resumed [ 97.506381][T14799] 9pnet_fd: Insufficient options for proto=fd [ 97.527000][T14806] loop2: detected capacity change from 0 to 512 [ 97.533708][T14806] EXT4-fs: Ignoring removed nobh option [ 97.540909][T14806] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 97.549345][T14806] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4685: invalid indirect mapped block 2683928664 (level 1) [ 97.550113][T14810] loop4: detected capacity change from 0 to 512 [ 97.564233][T14806] EXT4-fs (loop2): 1 truncate cleaned up [ 97.570452][T14810] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 97.575937][T14806] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.587429][T14810] EXT4-fs (loop4): 1 truncate cleaned up [ 97.604294][T14810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.630358][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.651053][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.752185][T14836] IPv6: Can't replace route, no match found [ 97.836657][T14848] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.922105][T14865] netlink: 'syz.4.4710': attribute type 1 has an invalid length. [ 97.987554][T14881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.995787][T14881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.005839][T14881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.058802][T14879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.067101][T14879] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.157385][ T3400] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.381806][T14942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.416102][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.532112][T14980] loop2: detected capacity change from 0 to 512 [ 98.543354][T14978] loop1: detected capacity change from 0 to 128 [ 98.560239][T14980] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.4754: casefold flag without casefold feature [ 98.574694][T14980] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4754: couldn't read orphan inode 15 (err -117) [ 98.591493][T14993] loop4: detected capacity change from 0 to 128 [ 98.618387][T14980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.636507][T14993] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.650897][T14993] ext4 filesystem being mounted at /951/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.681884][ T3310] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.683079][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.747229][T15012] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.802974][T15026] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 98.809510][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.817142][T15026] vhci_hcd vhci_hcd.0: Device attached [ 98.824456][T15026] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 98.853975][T15026] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 98.860515][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 98.867923][T15026] vhci_hcd vhci_hcd.0: Device attached [ 98.880885][T15026] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 98.887412][T15026] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 98.895082][T15026] vhci_hcd vhci_hcd.0: Device attached [ 98.917021][T15036] vhci_hcd: connection closed [ 98.917128][T15033] vhci_hcd: connection closed [ 98.921971][ T12] vhci_hcd: stop threads [ 98.927423][T15027] vhci_hcd: connection closed [ 98.930973][ T12] vhci_hcd: release socket [ 98.940160][ T12] vhci_hcd: disconnect device [ 98.962090][ T12] vhci_hcd: stop threads [ 98.966367][ T12] vhci_hcd: release socket [ 98.970857][ T12] vhci_hcd: disconnect device [ 98.976079][ T12] vhci_hcd: stop threads [ 98.980465][ T12] vhci_hcd: release socket [ 98.984971][ T12] vhci_hcd: disconnect device [ 99.012368][ T3400] vhci_hcd: vhci_device speed not set [ 99.266977][T15101] loop5: detected capacity change from 0 to 128 [ 99.278504][T15101] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 99.292509][T15101] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 99.316863][T15097] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=15097 comm=syz.1.4800 [ 99.347908][T15105] loop1: detected capacity change from 0 to 512 [ 99.371851][T11678] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 99.547236][T15135] loop5: detected capacity change from 0 to 164 [ 99.554704][T15135] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.564389][T15135] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 99.573219][T15135] rock: directory entry would overflow storage [ 99.579446][T15135] rock: sig=0x4f50, size=4, remaining=3 [ 99.585030][T15135] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 99.622418][T15161] loop1: detected capacity change from 0 to 128 [ 99.754818][T15183] loop2: detected capacity change from 0 to 1024 [ 99.763374][T15183] EXT4-fs: inline encryption not supported [ 99.769223][T15183] EXT4-fs: Ignoring removed i_version option [ 99.879725][T15183] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.912911][T15183] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.019164][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.033101][T15196] veth1_to_team: entered promiscuous mode [ 100.055744][T15196] bond_slave_0: entered promiscuous mode [ 100.083773][T15196] bond_slave_0: left promiscuous mode [ 100.106803][T15196] veth1_to_team: left promiscuous mode [ 100.148982][T15208] can0: slcan on ptm0. [ 100.275880][T15223] __nla_validate_parse: 11 callbacks suppressed [ 100.275892][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4833'. [ 100.291058][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4833'. [ 100.305279][T15225] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 100.317844][T15225] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 100.332789][T15223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4833'. [ 100.343533][T15206] can0 (unregistered): slcan off ptm0. [ 100.376030][T15225] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 100.517215][T15252] team0: Device gtp0 is of different type [ 100.756102][T15271] loop2: detected capacity change from 0 to 8192 [ 100.946066][T15310] loop5: detected capacity change from 0 to 512 [ 100.955256][T15310] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.966532][T15312] loop2: detected capacity change from 0 to 512 [ 100.975073][T15312] EXT4-fs: Ignoring removed nomblk_io_submit option [ 100.982362][T15310] EXT4-fs (loop5): 1 truncate cleaned up [ 100.988423][T15310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.002199][T15312] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 101.024828][T15312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.048306][T15312] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 101.082977][T15312] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 101.092205][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 101.092215][ T29] audit: type=1400 audit(2000000001.852:9536): avc: denied { relabelto } for pid=15311 comm="syz.2.4864" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 101.198431][ T29] audit: type=1400 audit(2000000001.898:9537): avc: denied { create } for pid=15331 comm="syz.5.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.218133][ T29] audit: type=1400 audit(2000000001.898:9538): avc: denied { getopt } for pid=15331 comm="syz.5.4871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.316052][ T29] audit: type=1400 audit(2000000002.039:9539): avc: denied { mounton } for pid=15335 comm="syz.4.4873" path="/961/file0" dev="tmpfs" ino=4900 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 101.339020][ T29] audit: type=1400 audit(2000000002.039:9540): avc: denied { mount } for pid=15335 comm="syz.4.4873" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 101.341479][T15370] loop2: detected capacity change from 0 to 512 [ 101.400506][ T29] audit: type=1326 audit(2000000002.142:9541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.1.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4514e9a9 code=0x7ffc0000 [ 101.418283][T15370] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.4877: casefold flag without casefold feature [ 101.424113][ T29] audit: type=1326 audit(2000000002.142:9542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.1.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4514e9a9 code=0x7ffc0000 [ 101.466810][T15370] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4877: couldn't read orphan inode 15 (err -117) [ 101.474413][ T29] audit: type=1326 audit(2000000002.198:9543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.1.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f4514e9a9 code=0x7ffc0000 [ 101.547731][T15345] geneve0: entered promiscuous mode [ 101.548273][ T29] audit: type=1326 audit(2000000002.235:9544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.1.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4514e9a9 code=0x7ffc0000 [ 101.552980][T15345] geneve0: entered allmulticast mode [ 101.576458][ T29] audit: type=1326 audit(2000000002.235:9545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15378 comm="syz.1.4881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f4514e9a9 code=0x7ffc0000 [ 101.611464][T15393] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=15393 comm=syz.1.4886 [ 101.627131][T15395] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4887'. [ 101.643275][T15395] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4887'. [ 101.720068][T15410] bond1: entered promiscuous mode [ 101.725218][T15410] bond1: entered allmulticast mode [ 101.732278][T15410] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.747165][T15410] bond1 (unregistering): Released all slaves [ 101.878623][T15504] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4908'. [ 101.996711][T15522] loop4: detected capacity change from 0 to 512 [ 102.161484][T15550] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4926'. [ 102.531825][T15587] loop4: detected capacity change from 0 to 8192 [ 102.597409][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4945'. [ 102.690463][ T9] net_ratelimit: 9 callbacks suppressed [ 102.690492][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.002330][T15631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4959'. [ 103.005032][T15633] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4960'. [ 103.133895][T15653] loop1: detected capacity change from 0 to 1024 [ 103.164564][T15651] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 103.236531][T15671] loop2: detected capacity change from 0 to 512 [ 103.255882][T15671] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.287948][T15671] EXT4-fs (loop2): 1 truncate cleaned up [ 103.373660][T15700] sctp: [Deprecated]: syz.0.4991 (pid 15700) Use of int in maxseg socket option. [ 103.373660][T15700] Use struct sctp_assoc_value instead [ 103.462350][T15703] loop1: detected capacity change from 0 to 512 [ 103.483199][T15703] geneve0: entered promiscuous mode [ 103.488578][T15703] geneve0: entered allmulticast mode [ 103.559111][T15747] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.623004][T15771] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.640058][T15773] loop1: detected capacity change from 0 to 512 [ 103.647620][T15775] loop5: detected capacity change from 0 to 128 [ 103.657042][T15775] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.818379][T15812] loop5: detected capacity change from 0 to 8192 [ 103.830401][T15812] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 103.979569][T15848] loop2: detected capacity change from 0 to 512 [ 103.995536][T15848] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 104.003716][T15848] EXT4-fs (loop2): orphan cleanup on readonly fs [ 104.010512][T15848] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 104.025437][T15848] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 104.032538][T15848] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.5037: bg 0: block 40: padding at end of block bitmap is not set [ 104.047289][T15848] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 104.056627][T15848] EXT4-fs (loop2): 1 truncate cleaned up [ 104.180755][T15879] binfmt_misc: register: failed to install interpreter file ./file2 [ 104.241571][T15885] syz.0.5051 (15885) used greatest stack depth: 8896 bytes left [ 104.585729][T15946] loop4: detected capacity change from 0 to 1024 [ 104.604970][T15946] ext4 filesystem being mounted at /1010/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.619235][T15946] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz.4.5080: path /1010/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 104.668116][T15959] loop1: detected capacity change from 0 to 512 [ 104.800789][T15978] loop4: detected capacity change from 0 to 8192 [ 105.030243][T16014] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.166455][T16040] loop5: detected capacity change from 0 to 1024 [ 105.173667][T16040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 105.186448][T16040] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 105.204715][T16040] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c840e01c, mo2=0000] [ 105.218012][T16040] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 2: comm syz.5.5113: lblock 2 mapped to illegal pblock 2 (length 1) [ 105.245675][T16040] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 48: comm syz.5.5113: lblock 0 mapped to illegal pblock 48 (length 1) [ 105.261600][T16040] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.5113: Failed to acquire dquot type 0 [ 105.279967][T16040] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 105.301631][T16048] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.323364][T16050] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 105.361309][T16040] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.5113: mark_inode_dirty error [ 105.449968][T16040] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 105.460334][T16040] EXT4-fs (loop5): 1 orphan inode deleted [ 105.484105][ T31] EXT4-fs error (device loop5): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 105.521444][ T31] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 105.539287][T11678] EXT4-fs error (device loop5): __ext4_get_inode_loc:4792: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 105.557050][T11678] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6255: Corrupt filesystem [ 105.582667][T11678] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 105.708256][T16084] loop5: detected capacity change from 0 to 512 [ 105.729342][T16084] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 105.743957][T16084] EXT4-fs (loop5): 1 truncate cleaned up [ 106.027334][T16121] program syz.4.5144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.215550][T16149] vhci_hcd: invalid port number 96 [ 106.220848][T16149] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 106.247406][T15997] syz.2.5096 (15997) used greatest stack depth: 7160 bytes left [ 106.280228][T16163] loop5: detected capacity change from 0 to 1024 [ 106.284943][T16162] loop2: detected capacity change from 0 to 256 [ 106.312161][T16162] FAT-fs (loop2): Directory bread(block 64) failed [ 106.319037][T16162] FAT-fs (loop2): Directory bread(block 65) failed [ 106.326902][T16163] ext4 filesystem being mounted at /235/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.338689][T16162] FAT-fs (loop2): Directory bread(block 66) failed [ 106.347410][T16162] FAT-fs (loop2): Directory bread(block 67) failed [ 106.354403][T16163] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz.5.5164: path /235/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 106.376603][T16162] FAT-fs (loop2): Directory bread(block 68) failed [ 106.383246][T16162] FAT-fs (loop2): Directory bread(block 69) failed [ 106.389890][T16162] FAT-fs (loop2): Directory bread(block 70) failed [ 106.396423][T16162] FAT-fs (loop2): Directory bread(block 71) failed [ 106.403145][T16162] FAT-fs (loop2): Directory bread(block 72) failed [ 106.409753][T16162] FAT-fs (loop2): Directory bread(block 73) failed [ 106.445085][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 106.445176][ T29] audit: type=1400 audit(2000000002.441:9711): avc: denied { create } for pid=16178 comm="syz.4.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.478282][T16162] bio_check_eod: 101 callbacks suppressed [ 106.478296][T16162] syz.2.5161: attempt to access beyond end of device [ 106.478296][T16162] loop2: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 106.482054][T16184] 9pnet_fd: Insufficient options for proto=fd [ 106.491573][ T29] audit: type=1400 audit(2000000002.469:9712): avc: denied { open } for pid=16158 comm="syz.2.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.522799][ T29] audit: type=1400 audit(2000000002.469:9713): avc: denied { kernel } for pid=16158 comm="syz.2.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 106.542430][ T29] audit: type=1400 audit(2000000002.469:9714): avc: denied { create } for pid=16178 comm="syz.4.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.562287][ T29] audit: type=1400 audit(2000000002.469:9715): avc: denied { bind } for pid=16178 comm="syz.4.5170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 106.581781][ T29] audit: type=1400 audit(2000000002.469:9716): avc: denied { node_bind } for pid=16178 comm="syz.4.5170" saddr=fc02::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 106.603124][ T29] audit: type=1400 audit(2000000002.469:9717): avc: denied { mounton } for pid=16180 comm="syz.5.5169" path="/236/file0" dev="tmpfs" ino=1226 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 106.626417][ T29] audit: type=1400 audit(2000000002.488:9718): avc: denied { allowed } for pid=16186 comm="syz.4.5172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 106.645906][ T29] audit: type=1400 audit(2000000002.488:9719): avc: denied { create } for pid=16186 comm="syz.4.5172" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.667534][ T29] audit: type=1400 audit(2000000002.488:9720): avc: denied { map } for pid=16186 comm="syz.4.5172" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=39468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 106.715955][T16194] __nla_validate_parse: 10 callbacks suppressed [ 106.715968][T16194] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5175'. [ 106.737319][ T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.745160][ T51] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.763131][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.782173][T16202] loop4: detected capacity change from 0 to 512 [ 106.797855][T16202] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 106.821540][T16202] EXT4-fs (loop4): mount failed [ 106.870053][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 106.943906][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5182'. [ 106.952889][T16213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5182'. [ 106.962178][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5182'. [ 106.971118][T16213] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5182'. [ 106.987703][T16213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5182'. [ 107.006616][T16215] loop1: detected capacity change from 0 to 8192 [ 107.070430][T16228] IPVS: persistence engine module ip_vs_pe_ not found [ 107.077737][T16232] openvswitch: netlink: Message has 6 unknown bytes. [ 107.210133][T16247] random: crng reseeded on system resumption [ 107.220956][T16249] ip6gretap0: entered promiscuous mode [ 107.244140][T16249] macsec2: entered allmulticast mode [ 107.249505][T16249] ip6gretap0: entered allmulticast mode [ 107.255287][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 107.282202][T16249] ip6gretap0: left allmulticast mode [ 107.287611][T16249] ip6gretap0: left promiscuous mode [ 107.426165][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5208'. [ 107.435073][T16280] netlink: 'syz.5.5208': attribute type 21 has an invalid length. [ 107.452681][T16283] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5210'. [ 107.504981][T16291] loop4: detected capacity change from 0 to 512 [ 107.523135][T16291] ext4: Unknown parameter 'measure' [ 107.569037][T16314] program syz.4.5220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.680552][T16336] loop5: detected capacity change from 0 to 512 [ 107.698255][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.708627][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 107.723245][T16336] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 107.737980][T16336] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #16: comm syz.5.5232: invalid indirect mapped block 4294967295 (level 0) [ 107.790715][T16336] EXT4-fs (loop5): Remounting filesystem read-only [ 107.797500][T16336] EXT4-fs (loop5): 1 orphan inode deleted [ 107.803274][T16336] EXT4-fs (loop5): 1 truncate cleaned up [ 107.865943][T16336] EXT4-fs mount: 22 callbacks suppressed [ 107.866006][T16336] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.918481][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.929053][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 107.999344][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.009809][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 108.023422][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.084164][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.094661][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 108.283177][ T51] bridge0: port 3(batadv0) entered disabled state [ 108.299386][ T51] bridge_slave_1: left allmulticast mode [ 108.305103][ T51] bridge_slave_1: left promiscuous mode [ 108.310844][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.351239][ T51] bridge_slave_0: left allmulticast mode [ 108.356938][ T51] bridge_slave_0: left promiscuous mode [ 108.362666][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.571974][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.582978][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.592838][ T51] bond0 (unregistering): Released all slaves [ 108.632915][T16353] chnl_net:caif_netlink_parms(): no params data found [ 108.671060][ T51] hsr_slave_0: left promiscuous mode [ 108.686087][ T51] hsr_slave_1: left promiscuous mode [ 108.692077][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.699686][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.710656][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.718123][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.726469][ T51] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 108.733318][ T51] batman_adv: batadv0: Removing interface: ipvlan2 [ 108.755168][ T51] veth1_macvtap: left promiscuous mode [ 108.760688][ T51] veth0_macvtap: left promiscuous mode [ 108.772204][ T51] veth1_vlan: left promiscuous mode [ 108.784679][ T51] veth0_vlan: left promiscuous mode [ 108.924066][ T51] team0 (unregistering): Port device team_slave_1 removed [ 108.943462][ T51] team0 (unregistering): Port device team_slave_0 removed [ 109.036467][T16603] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5275'. [ 109.045590][ T3400] infiniband syz1: ib_query_port failed (-19) [ 109.071892][T16603] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5275'. [ 109.085639][T16353] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.092688][T16353] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.103653][T16353] bridge_slave_0: entered allmulticast mode [ 109.112922][T16353] bridge_slave_0: entered promiscuous mode [ 109.124826][T16353] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.131979][T16353] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.140629][T16353] bridge_slave_1: entered allmulticast mode [ 109.147592][T16353] bridge_slave_1: entered promiscuous mode [ 109.209978][T16353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.222715][T16676] vlan3: entered allmulticast mode [ 109.227936][T16676] gretap0: entered allmulticast mode [ 109.237175][T16353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.266804][T16353] team0: Port device team_slave_0 added [ 109.284427][T16710] delete_channel: no stack [ 109.291687][T16353] team0: Port device team_slave_1 added [ 109.324802][T16353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.331816][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.357808][T16353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.373162][T16353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.380135][T16353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.406085][T16353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.444821][T16353] hsr_slave_0: entered promiscuous mode [ 109.450989][T16353] hsr_slave_1: entered promiscuous mode [ 109.456850][T16353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 109.466365][T16353] Cannot create hsr debugfs directory [ 109.584784][T16743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.594051][T16743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.691772][ T9] IPVS: starting estimator thread 0... [ 109.749757][T16898] netlink: 'syz.5.5318': attribute type 10 has an invalid length. [ 109.766997][T16898] team0: Port device dummy0 added [ 109.788624][T16882] IPVS: using max 2880 ests per chain, 144000 per kthread [ 109.814564][T16353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 109.825659][T16353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 109.834371][T16353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 109.844491][T16353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 109.876253][T16353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.887983][T16353] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.896774][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.903884][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.917018][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.924080][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.935448][T16927] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.943762][T16927] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.944856][T16353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.991093][T16935] random: crng reseeded on system resumption [ 110.001500][T16353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.059566][T16353] veth0_vlan: entered promiscuous mode [ 110.067164][T16353] veth1_vlan: entered promiscuous mode [ 110.081599][T16353] veth0_macvtap: entered promiscuous mode [ 110.088930][T16353] veth1_macvtap: entered promiscuous mode [ 110.099873][T16353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.112061][T16353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.121980][T16353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.130911][T16353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.139660][T16353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.148421][T16353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.264458][T16971] loop1: detected capacity change from 0 to 1024 [ 110.273461][T16971] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 110.284453][T16971] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 110.296304][T16971] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: inode #32: comm syz.1.5335: iget: special inode unallocated [ 110.309032][T16971] EXT4-fs (loop1): Remounting filesystem read-only [ 110.315586][T16971] EXT4-fs (loop1): no journal found [ 110.320876][T16971] EXT4-fs (loop1): can't get journal size [ 110.328427][T16971] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 110.337051][T16971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 110.365378][T16984] vcan0: entered allmulticast mode [ 110.373037][T16984] vcan0: left allmulticast mode [ 110.387570][T16353] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.435168][T16994] loop2: detected capacity change from 0 to 512 [ 110.468202][T17005] ip6gretap0: entered promiscuous mode [ 110.471340][T17007] netlink: 'syz.1.5348': attribute type 9 has an invalid length. [ 110.474147][T17005] macsec1: entered allmulticast mode [ 110.486980][T17005] ip6gretap0: entered allmulticast mode [ 110.495182][T16994] EXT4-fs (loop2): 1 orphan inode deleted [ 110.501119][T17005] ip6gretap0: left allmulticast mode [ 110.501408][T16994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.506547][T17005] ip6gretap0: left promiscuous mode [ 110.520204][T16994] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.536915][ T56] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:4: Failed to release dquot type 1 [ 110.578164][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.691553][T17035] loop5: detected capacity change from 0 to 1024 [ 110.703923][T17035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.729324][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 110.743744][T17046] netlink: 'syz.4.5364': attribute type 83 has an invalid length. [ 110.756990][T17048] SELinux: Context system_u:object_r:faillog_t:s0 is not valid (left unmapped). [ 110.786556][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.836058][T17061] loop5: detected capacity change from 0 to 512 [ 110.856341][T17061] EXT4-fs (loop5): orphan cleanup on readonly fs [ 110.866990][T17068] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 110.868264][T17061] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.5366: bad orphan inode 13 [ 110.885920][T17068] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.893084][T17068] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.897921][T17061] ext4_test_bit(bit=12, block=18) = 1 [ 110.905766][T17061] is_bad_inode(inode)=0 [ 110.909987][T17061] NEXT_ORPHAN(inode)=2130706432 [ 110.914975][T17061] max_ino=32 [ 110.918169][T17061] i_nlink=1 [ 110.942992][T17061] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 110.961936][T17061] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 110.991461][T17061] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 111.008143][T17061] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000. [ 111.036145][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.076388][T17105] loop5: detected capacity change from 0 to 512 [ 111.096902][T17105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.110840][T17105] ext4 filesystem being mounted at /298/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 111.139007][T17105] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5383: corrupted inode contents [ 111.155154][T17105] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5383: mark_inode_dirty error [ 111.175159][T17105] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5383: corrupted inode contents [ 111.198137][T17129] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5383: corrupted inode contents [ 111.217051][T17129] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5383: mark_inode_dirty error [ 111.235286][T17129] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5383: corrupted inode contents [ 111.248528][T17129] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.5383: mark_inode_dirty error [ 111.260008][T17129] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5383: corrupted inode contents [ 111.272022][T17129] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5383: mark_inode_dirty error [ 111.274221][T17132] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.297805][T17105] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5383: corrupted inode contents [ 111.333463][T17139] loop1: detected capacity change from 0 to 512 [ 111.351869][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.393872][T17132] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.448720][T17132] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.495860][T17179] erspan0: entered promiscuous mode [ 111.531965][T17132] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.605377][T17132] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.614051][T17203] netlink: 'syz.4.5421': attribute type 1 has an invalid length. [ 111.618524][T17132] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.642316][T17132] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.657457][T17132] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.668116][T17220] loop1: detected capacity change from 0 to 256 [ 111.724611][T17220] vfat: Bad value for 'gid' [ 111.729161][T17220] vfat: Bad value for 'gid' [ 111.798082][T17248] bridge_slave_1: left allmulticast mode [ 111.803982][T17248] bridge_slave_1: left promiscuous mode [ 111.809659][T17248] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.830702][T17248] bridge_slave_0: left allmulticast mode [ 111.836374][T17248] bridge_slave_0: left promiscuous mode [ 111.842061][T17248] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.862676][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 111.862689][ T29] audit: type=1400 audit(2000000520.491:9952): avc: denied { create } for pid=17254 comm="syz.5.5440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.889156][ T29] audit: type=1326 audit(2000000520.491:9953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.5442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a45a9e9a9 code=0x7ffc0000 [ 111.912781][ T29] audit: type=1326 audit(2000000520.491:9954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.5442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a45a9e9a9 code=0x7ffc0000 [ 111.936590][ T29] audit: type=1400 audit(2000000520.491:9955): avc: denied { write } for pid=17254 comm="syz.5.5440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.956884][ T29] audit: type=1400 audit(2000000520.491:9956): avc: denied { nlmsg_write } for pid=17254 comm="syz.5.5440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 111.978134][ T29] audit: type=1326 audit(2000000520.510:9957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.5442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a45a9e9a9 code=0x7ffc0000 [ 112.001654][ T29] audit: type=1326 audit(2000000520.510:9958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.5442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a45a9e9a9 code=0x7ffc0000 [ 112.025245][ T29] audit: type=1326 audit(2000000520.510:9959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.5442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a45a9e9a9 code=0x7ffc0000 [ 112.048777][ T29] audit: type=1326 audit(2000000520.594:9960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17258 comm="syz.2.5442" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a45a9e9a9 code=0x7ffc0000 [ 112.072253][ T29] audit: type=1400 audit(2000000520.594:9961): avc: denied { setopt } for pid=17266 comm="syz.1.5446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 112.100448][T17265] loop4: detected capacity change from 0 to 2048 [ 112.140725][T17265] EXT4-fs (loop4): failed to initialize system zone (-117) [ 112.150671][T17265] EXT4-fs (loop4): mount failed [ 112.257601][T17297] loop2: detected capacity change from 0 to 1024 [ 112.274932][T17310] __nla_validate_parse: 10 callbacks suppressed [ 112.274946][T17310] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5461'. [ 112.297337][T17297] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.5456: Failed to acquire dquot type 0 [ 112.317498][T17297] EXT4-fs (loop2): 1 truncate cleaned up [ 112.326354][T17297] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.350666][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.385237][T17331] netlink: 'syz.0.5471': attribute type 1 has an invalid length. [ 112.406051][T17328] loop4: detected capacity change from 0 to 2048 [ 112.432892][T17328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.452924][T17328] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 112.469326][T17328] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 8 with error 28 [ 112.481576][T17328] EXT4-fs (loop4): This should not happen!! Data will be lost [ 112.481576][T17328] [ 112.491379][T17328] EXT4-fs (loop4): Total free blocks count 0 [ 112.497415][T17328] EXT4-fs (loop4): Free/Dirty block details [ 112.503313][T17328] EXT4-fs (loop4): free_blocks=2415919504 [ 112.509064][T17328] EXT4-fs (loop4): dirty_blocks=16 [ 112.514264][T17328] EXT4-fs (loop4): Block reservation details [ 112.520283][T17328] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 112.613151][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.675349][T17412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5491'. [ 112.746290][T17427] openvswitch: netlink: Message has 6 unknown bytes. [ 112.763548][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5500'. [ 112.772616][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5500'. [ 112.791113][T17433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5500'. [ 113.044871][T17481] SELinux: syz.5.5519 (17481) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 113.116498][T17493] loop0: detected capacity change from 0 to 512 [ 113.170200][T17493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.197006][T17493] ext4 filesystem being mounted at /1098/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.231153][T17493] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5526: corrupted inode contents [ 113.246852][T17493] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.5526: mark_inode_dirty error [ 113.260406][T17493] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5526: corrupted inode contents [ 113.277320][T17493] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5526: corrupted inode contents [ 113.290124][T17493] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.5526: mark_inode_dirty error [ 113.302494][T17493] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5526: corrupted inode contents [ 113.316222][T17493] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.5526: mark_inode_dirty error [ 113.339426][T17493] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5526: corrupted inode contents [ 113.360153][T17493] EXT4-fs error (device loop0): ext4_dirty_inode:6459: inode #2: comm syz.0.5526: mark_inode_dirty error [ 113.375143][T17503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.384565][T17503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.396596][T17529] EXT4-fs error (device loop0): ext4_do_update_inode:5568: inode #2: comm syz.0.5526: corrupted inode contents [ 113.429317][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.495722][T17547] geneve2: entered promiscuous mode [ 113.501083][T17547] geneve2: entered allmulticast mode [ 113.700805][T17579] netlink: 'syz.0.5562': attribute type 1 has an invalid length. [ 113.736623][T17584] netlink: 120 bytes leftover after parsing attributes in process `syz.5.5564'. [ 113.843491][T17597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5570'. [ 113.852477][T17597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5570'. [ 113.854289][T17600] loop5: detected capacity change from 0 to 512 [ 113.876714][T17600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.905492][T17600] ext4 filesystem being mounted at /342/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 113.999924][T17600] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5572: corrupted inode contents [ 114.034178][T17600] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5572: mark_inode_dirty error [ 114.050814][T17600] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5572: corrupted inode contents [ 114.084405][T17625] loop0: detected capacity change from 0 to 512 [ 114.091547][T17616] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5572: corrupted inode contents [ 114.111873][T17616] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5572: mark_inode_dirty error [ 114.134714][T17625] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.148065][T17616] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5572: corrupted inode contents [ 114.160065][T17625] ext4 filesystem being mounted at /1109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.172820][T17616] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.5572: mark_inode_dirty error [ 114.178586][T17625] EXT4-fs error (device loop0): ext4_get_first_dir_block:3525: inode #12: comm syz.0.5578: Directory hole found for htree leaf block 0 [ 114.184966][T17616] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5572: corrupted inode contents [ 114.217012][T17616] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #2: comm syz.5.5572: mark_inode_dirty error [ 114.247956][T17623] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #2: comm syz.5.5572: corrupted inode contents [ 114.273227][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.346278][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.733220][T17680] netlink: 'syz.0.5602': attribute type 16 has an invalid length. [ 114.741138][T17680] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.5602'. [ 114.923282][T17707] loop0: detected capacity change from 0 to 128 [ 114.934673][T17710] vhci_hcd: invalid port number 15 [ 114.939871][T17710] vhci_hcd: invalid port number 15 [ 115.115083][T17739] ref_ctr_offset mismatch. inode: 0x173 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x8000000 [ 115.236122][T17758] C: renamed from team_slave_0 (while UP) [ 115.243720][T17758] netlink: 'syz.2.5634': attribute type 3 has an invalid length. [ 115.251635][T17758] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5634'. [ 116.005169][T17812] SELinux: syz.0.5658 (17812) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 116.255534][T17836] team_slave_1: mtu greater than device maximum [ 116.261978][T17836] team0: Device team_slave_1 failed to change mtu [ 116.300518][T17840] tmpfs: Unknown parameter 'smackfstransmute' [ 116.338354][T17842] loop2: detected capacity change from 0 to 512 [ 116.347992][T17842] journal_path: Lookup failure for './file0/../file0' [ 116.354824][T17842] EXT4-fs: error: could not find journal device path [ 116.481604][T17862] loop4: detected capacity change from 0 to 512 [ 116.505675][T17862] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 116.513652][T17862] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 116.552673][T17862] System zones: 0-2, 18-18, 34-34 [ 116.563250][T17862] EXT4-fs (loop4): orphan cleanup on readonly fs [ 116.587157][T17862] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.5678: bg 0: block 248: padding at end of block bitmap is not set [ 116.610386][T17877] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=17877 comm=syz.1.5684 [ 116.646518][T17862] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.5678: Failed to acquire dquot type 1 [ 116.675137][T17862] EXT4-fs (loop4): 1 truncate cleaned up [ 116.692042][T17862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 116.735906][ T3379] IPVS: starting estimator thread 0... [ 116.758572][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.786578][T17905] netlink: 'syz.0.5700': attribute type 1 has an invalid length. [ 116.833671][T17903] IPVS: using max 3024 ests per chain, 151200 per kthread [ 116.891924][T17927] loop1: detected capacity change from 0 to 2048 [ 117.053195][T17964] loop0: detected capacity change from 0 to 2048 [ 117.081033][T17970] loop1: detected capacity change from 0 to 764 [ 117.102214][T17964] loop0: p1 < > p4 [ 117.106884][T17964] loop0: p4 size 8388608 extends beyond EOD, truncated [ 117.196561][T17998] x_tables: duplicate underflow at hook 2 [ 117.263129][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 117.263144][ T29] audit: type=1326 audit(2000000525.561:10100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.0.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 117.293193][ T29] audit: type=1326 audit(2000000525.561:10101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.0.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 117.316890][ T29] audit: type=1326 audit(2000000525.561:10102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.0.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=241 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 117.340602][ T29] audit: type=1326 audit(2000000525.561:10103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.0.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 117.364425][ T29] audit: type=1326 audit(2000000525.589:10104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18011 comm="syz.0.5742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97dfdee9a9 code=0x7ffc0000 [ 117.427715][ T29] audit: type=1326 audit(2000000525.710:10105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18023 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45445de9a9 code=0x7ffc0000 [ 117.451447][ T29] audit: type=1326 audit(2000000525.710:10106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18023 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45445de9a9 code=0x7ffc0000 [ 117.475072][ T29] audit: type=1326 audit(2000000525.710:10107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18023 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45445de9a9 code=0x7ffc0000 [ 117.498720][ T29] audit: type=1326 audit(2000000525.710:10108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18023 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45445de9a9 code=0x7ffc0000 [ 117.522330][ T29] audit: type=1326 audit(2000000525.710:10109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18023 comm="syz.1.5747" exe="/root/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f45445de9a9 code=0x7ffc0000 [ 117.527495][T18026] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 117.556001][T18026] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 117.603975][T18035] C: renamed from team_slave_0 (while UP) [ 117.610923][T18035] netlink: 'syz.0.5752': attribute type 4 has an invalid length. [ 117.619714][T18035] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 117.648782][T18038] loop0: detected capacity change from 0 to 128 [ 117.670581][T18043] netlink: 'syz.0.5754': attribute type 3 has an invalid length. [ 117.678425][T18043] __nla_validate_parse: 5 callbacks suppressed [ 117.678437][T18043] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5754'. [ 117.772085][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 117.779632][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 117.787139][ T9] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 117.794684][T18056] loop4: detected capacity change from 0 to 2048 [ 117.796714][ T9] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 117.815731][T18064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.828359][T18056] loop4: p1 < > p4 [ 117.833246][T18056] loop4: p4 size 8388608 extends beyond EOD, truncated [ 117.868668][T18064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.901786][T18089] loop2: detected capacity change from 0 to 256 [ 117.914902][T18089] FAT-fs (loop2): Directory bread(block 64) failed [ 117.921792][T18089] FAT-fs (loop2): Directory bread(block 65) failed [ 117.939333][T18089] FAT-fs (loop2): Directory bread(block 66) failed [ 117.947173][T18064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.961722][T18089] FAT-fs (loop2): Directory bread(block 67) failed [ 117.968602][T18089] FAT-fs (loop2): Directory bread(block 68) failed [ 117.975304][T18089] FAT-fs (loop2): Directory bread(block 69) failed [ 117.981897][T18089] FAT-fs (loop2): Directory bread(block 70) failed [ 117.988807][T18089] FAT-fs (loop2): Directory bread(block 71) failed [ 117.995534][T18089] FAT-fs (loop2): Directory bread(block 72) failed [ 118.003718][T18089] FAT-fs (loop2): Directory bread(block 73) failed [ 118.019813][T18064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.022353][T18089] syz.2.5768: attempt to access beyond end of device [ 118.022353][T18089] loop2: rw=0, sector=1192, nr_sectors = 4 limit=256 [ 118.085280][T18064] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.098897][T18064] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.110376][T18064] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.121986][T18064] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.456592][T18171] loop2: detected capacity change from 0 to 4096 [ 118.465259][T18171] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.501212][T18177] erspan0: entered promiscuous mode [ 118.506889][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.535165][T18181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5801'. [ 118.617986][T18210] tap0: tun_chr_ioctl cmd 2147767521 [ 118.771386][T18233] SELinux: syz.2.5820 (18233) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 119.022862][T18264] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.047173][T18262] loop1: detected capacity change from 0 to 8192 [ 119.078715][T18266] support for cryptoloop has been removed. Use dm-crypt instead. [ 119.110732][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 119.262236][T18311] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5851'. [ 119.313342][T18317] program syz.2.5857 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.331750][T18322] Cannot find del_set index 0 as target [ 119.438985][T18349] SELinux: failed to load policy [ 119.623028][T18387] loop5: detected capacity change from 0 to 128 [ 119.632707][T18387] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 119.640655][T18387] FAT-fs (loop5): Filesystem has been set read-only [ 119.648964][T18387] syz.5.5887: attempt to access beyond end of device [ 119.648964][T18387] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 119.662824][T18387] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 119.670689][T18387] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100) [ 119.678800][T18387] syz.5.5887: attempt to access beyond end of device [ 119.678800][T18387] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.692349][T18387] syz.5.5887: attempt to access beyond end of device [ 119.692349][T18387] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.705832][T18387] syz.5.5887: attempt to access beyond end of device [ 119.705832][T18387] loop5: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 119.719665][T18389] syz.5.5887: attempt to access beyond end of device [ 119.719665][T18389] loop5: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 119.733028][T18389] Buffer I/O error on dev loop5, logical block 2065, async page read [ 119.742485][T18389] syz.5.5887: attempt to access beyond end of device [ 119.742485][T18389] loop5: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 119.755770][T18389] Buffer I/O error on dev loop5, logical block 2066, async page read [ 119.763902][T18389] syz.5.5887: attempt to access beyond end of device [ 119.763902][T18389] loop5: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 119.777138][T18389] Buffer I/O error on dev loop5, logical block 2067, async page read [ 119.785327][T18389] syz.5.5887: attempt to access beyond end of device [ 119.785327][T18389] loop5: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 119.798749][T18389] Buffer I/O error on dev loop5, logical block 2068, async page read [ 119.807055][T18389] syz.5.5887: attempt to access beyond end of device [ 119.807055][T18389] loop5: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 119.820313][T18389] Buffer I/O error on dev loop5, logical block 2069, async page read [ 119.828629][T18389] Buffer I/O error on dev loop5, logical block 2070, async page read [ 119.836864][T18389] Buffer I/O error on dev loop5, logical block 2071, async page read [ 119.845040][T18389] Buffer I/O error on dev loop5, logical block 2072, async page read [ 119.853276][T18389] Buffer I/O error on dev loop5, logical block 2065, async page read [ 119.861409][T18389] Buffer I/O error on dev loop5, logical block 2066, async page read [ 119.918855][T18407] loop4: detected capacity change from 0 to 2048 [ 119.946824][T18407] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.975485][ T3310] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.574109][T18442] loop5: detected capacity change from 0 to 512 [ 120.582353][T18442] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 120.583929][T18444] loop2: detected capacity change from 0 to 512 [ 120.599218][T18442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.612163][T18442] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.631230][T18442] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5904: corrupted xattr block 19: overlapping e_value [ 120.650371][T18442] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 120.667606][T18442] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5904: corrupted xattr block 19: overlapping e_value [ 120.681627][T18442] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 120.692280][T18442] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.5904: corrupted xattr block 19: overlapping e_value [ 120.736904][T18464] netlink: 'syz.2.5911': attribute type 1 has an invalid length. [ 120.748953][T11678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.812292][T18485] netlink: 'syz.1.5918': attribute type 1 has an invalid length. [ 120.820067][T18485] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5918'. [ 120.822260][T18483] loop5: detected capacity change from 0 to 512 [ 120.862058][T18498] loop2: detected capacity change from 0 to 512 [ 120.876194][T18483] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 120.892581][T18483] EXT4-fs (loop5): mount failed [ 120.892935][T18500] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5924'. [ 120.912837][T18498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.932047][T18498] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.981098][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.012531][T18534] loop2: detected capacity change from 0 to 1024 [ 121.019665][T18534] EXT4-fs: Ignoring removed nomblk_io_submit option [ 121.073489][T18534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.100656][T18534] EXT4-fs (loop2): shut down requested (0) [ 121.121250][T18554] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5941'. [ 121.130920][T18534] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 121.151673][T18534] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 121.199657][T13400] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.211103][T18565] netlink: 'syz.1.5944': attribute type 4 has an invalid length. [ 121.255782][T18576] loop5: detected capacity change from 0 to 256 [ 121.328128][ T3291] ================================================================== [ 121.336236][ T3291] BUG: KCSAN: data-race in do_select / pollwake [ 121.342484][ T3291] [ 121.344799][ T3291] write to 0xffffc9000153f9e0 of 4 bytes by task 18592 on cpu 0: [ 121.352502][ T3291] pollwake+0xb6/0x100 [ 121.356557][ T3291] __wake_up_sync_key+0x52/0x80 [ 121.361404][ T3291] anon_pipe_write+0x8ba/0xaa0 [ 121.366154][ T3291] io_write+0x612/0xd40 [ 121.370304][ T3291] __io_issue_sqe+0xfb/0x2e0 [ 121.374884][ T3291] io_issue_sqe+0x53/0x970 [ 121.379294][ T3291] io_submit_sqes+0x667/0xfd0 [ 121.383962][ T3291] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 121.389502][ T3291] __x64_sys_io_uring_enter+0x78/0x90 [ 121.394868][ T3291] x64_sys_call+0x28c8/0x2fb0 [ 121.399536][ T3291] do_syscall_64+0xd2/0x200 [ 121.404024][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.409912][ T3291] [ 121.412221][ T3291] read to 0xffffc9000153f9e0 of 4 bytes by task 3291 on cpu 1: [ 121.419747][ T3291] do_select+0xe48/0xf50 [ 121.424000][ T3291] core_sys_select+0x3d7/0x6e0 [ 121.428777][ T3291] __se_sys_pselect6+0x216/0x280 [ 121.433739][ T3291] __x64_sys_pselect6+0x78/0x90 [ 121.438594][ T3291] x64_sys_call+0x1caa/0x2fb0 [ 121.443264][ T3291] do_syscall_64+0xd2/0x200 [ 121.447757][ T3291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.453642][ T3291] [ 121.455951][ T3291] value changed: 0x00000000 -> 0x00000001 [ 121.461652][ T3291] [ 121.463961][ T3291] Reported by Kernel Concurrency Sanitizer on: [ 121.470104][ T3291] CPU: 1 UID: 0 PID: 3291 Comm: syz-executor Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(voluntary) [ 121.480939][ T3291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.490980][ T3291] ==================================================================