last executing test programs: 4.086003212s ago: executing program 2 (id=4066): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r2, 0x0, 0x0, 0x0, 0x0) 3.991550338s ago: executing program 2 (id=4072): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f88) r1 = dup2(r0, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x7fff}) 3.951885861s ago: executing program 2 (id=4074): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) r1 = gettid() fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ftruncate(r2, 0xf2d) 3.919159274s ago: executing program 2 (id=4076): r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000025ad9835850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r3, 0x2, &(0x7f0000000500)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 3.770126615s ago: executing program 2 (id=4078): ptrace(0x10, 0x1) r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$cont(0x20, r1, 0x0, 0x0) ptrace$cont(0x9, r1, 0x0, 0x0) 2.73353361s ago: executing program 1 (id=4120): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) dup2(r0, r1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x12, r1, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000002380)='./file0/file0\x00', 0x900800, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0xff, 0x9b7, &(0x7f0000003fc0)="$eJzs3c9vHPXdB/D3+Efix6AQIA9PHgRkExowkDq2U0IjLk3sdWLqH5XtSERVRShJUBSrqaBIgHpIpaqnovZQ9UBvHHtC4gKXKrf2L+ihUkX/BNRT1EO3mtnd2MZer2M5tklfL2s8vz7z/X6+nvF8tbO7M+GbrNFoVMMW5y/+cSeTZe85N/HlJ59+VA6/uJV96c3LxefJQJJa0pfkcNI/PjE/N9OloBvJ5SS3kyLJ/jTHm3I5xW/y8PL87RR/KOutXNxiw9iUBv/Vdvv4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvagYnxgZGS0yPTV78fVaZ9UjwDut7Fku74vqqd/FF13rTYpyyMBA+1Hfhw8tr36i/HUsTzXnnqoeSJ6BfPjQEwdffbyvp739Bgnfi3+3HoZ8zxu++8GHN95cWrr6zjYl8k1zvj47tTA3NXP2fL02tTBXO3P69MjJC5MLtcmp6frCpYXF+kxtfL5+dnFuvjY0/kJt9MyZU7X68KW5i7PnJ4an6+2Fr3x7bGTkdO214R/Uz84vzM2efG14YfzC1PT01Oz5KqZcXca8Uh6I359arC3Wz87UateuL109tSqjdQ6JMmi0W0vKoLFuQWMjY2Ojo2Njo6dfPvPyKyMjfcsLelMtGPmarNlk2w5a9pSPezYbuc1ncNi6nlb/n+lMZTYX83pq6/6MZyLzmctMh/Ut7f7/+Mn6hvWu7P/bvfzh5dVPpur/n2nOPdOp/88/3kuHfHbm5918kA9zI29mKUu5mndWrd2/hRIbjd1t0b39nE89s5nKQuYylZmcrZbUWktqOZPTOZ2RvJELmcxCapnMVKZTz0IuZSGLqVdH1HjmU8/ZLPaVO7qWoYznhdQymjM5k1OppZ7hXMpcLmY25zORs1Up13K9+ruf2iDHu0Gjmwka2yBog/6/tUD/Tzf34SwOW9No9f/7uocOje9EQgAAAMC2+/+/5MChx/7896Q/T1fX2AEAAIAHTfVxvafKUX859XSKyanp+shupwUAAABso6L6jl2RZDBHmlPtb0K5CAAAAAAPiOr9/2fK0WA5dSSF1/8AAADwoOl+j/2uEcWJ9u1/a1ea4yutiNZ9fgcnp6brw+Nz06+O5rnqLgPVNw3WlNabg0n19YMXc7QZdXSwOR5cXeJAGTU6/OpoBnKs1ZChZ8vRs0PrRI6VkS/m+Wbk8+3IgayJPFVGAsCD7tgG/fFm+/8Xc6IZceLJ6vbtfU+u0weP6FkBYK/o/oydrhHFd7q8/n8s1440P1IwnLdyM0u5khPVtw2qTxy0Ss3tIsulDq74GMKJLlcDBlc84eVE+3rAkYfXvR4wuOJBLyfWXBHoFHtqB/YEAOycY2v64Q36/0ajObXm+v/Gr/8HfaQQAPaUu0+wv48Tu91GAGC1LfXSvfcxIQAAAAAAAAAAAAAAAAAAAAAAAAAAAHgA7MT9/02Y2K2JgZ05wn+0L9krTd6mid0+MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALATiqR3veU9yf6kbyTJyZ3P6v65tdsJ7LLiTu7k/RzY7TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB40rfv/96Q5fqi5KH09yfEkl5P8cLdz3EYHdzuB3bbi/v/lPk+jSF9zt6foH5+Yn5spd3/2l+u//OTTj8phK/WUBZQ1rHq4RKuGzls9Wm01OHH13Rs/u/nT2sS5Kslzi5PTEzPn57+3HPhE8VlSS3Noa+f786J1FK9u+WdlS9tuvr1RvZNVvRNr6/2/9bK+W+/xP/12o79J23Ia15eujpU1LdZfX3zvJ9ffXxH0WI4mzw4lQ6trerscOtR0NP0b1Vt8VfyqOJDf53K1/8s0ikZR7qJHqvb/z7XrS1eH37q5dKVDTgdzJMmVZGDzOR1ZuyfaqqOup7+sdaQKKn8d6lLehh7qPdBoNEsc7dCGR6tDZvCe2lDr3IZKl797q42nOmT0eJ675z39XJcaW/7VaGrOFV8Vfysu5K/55Yrnf/SU+/94NvPfWcZUkSuOlI6RvceXWz62csUbX4/s61DCvg0zYWt+nR/nu3f3f8+K839rX+3M+WhFjfft/6Jo9kIt1fShr/VIrbNPpyxbeR5qRnXI83/z0trtuuT5Upczyjb9/69WfFV8XAzln7nl+T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDeVyS96y3vSY4nOZjkkXK+ljS2o76ewWI7itmkfWuW3NrB2veOnrtTxZ3cyfs5sKvpAAAAAAAAALBtzk18+cmnH5VD9X58b75VfJ4MNN/p70tysPhd//jE/NxMl4L6k8tJbpfTA/eWQ7ldHl6ev13OHb73tgAAm/OfAAAA///dpHk6") mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x3) 2.666175355s ago: executing program 1 (id=4121): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000c00)={[{@norecovery}, {@bsdgroups}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7f}}, {@minixdf}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000040)='sessionid\x00') r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0) fallocate(r1, 0x0, 0x0, 0x1001f0) pread64(r0, &(0x7f0000004180)=""/4096, 0x1000, 0x0) 2.659354316s ago: executing program 1 (id=4124): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.570773082s ago: executing program 1 (id=4132): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x2, 0x4, 0x10008, 0x1, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008180000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@discard}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='ext4_es_lookup_extent_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 2.570446902s ago: executing program 2 (id=4133): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) futex_waitv(&(0x7f0000000100)=[{0x0, 0x0}], 0x1, 0x0, 0x0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x2201, &(0x7f0000000100)=ANY=[]) 2.443519181s ago: executing program 1 (id=4139): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2.175033091s ago: executing program 0 (id=4152): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r1}, &(0x7f0000000540), &(0x7f0000000580)=r2}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r1, &(0x7f0000000780)}, 0x20) 2.172666941s ago: executing program 0 (id=4154): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) 381.348592ms ago: executing program 4 (id=4155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x9c}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xb4}}, 0x0) 380.898482ms ago: executing program 1 (id=4156): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) 358.016324ms ago: executing program 0 (id=4158): r0 = io_uring_setup(0x2e34, &(0x7f0000000180)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) splice(r1, 0x0, r2, 0x0, 0x4ffe2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 342.224455ms ago: executing program 3 (id=4159): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x46, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) 330.425636ms ago: executing program 4 (id=4160): bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x9c) 323.433467ms ago: executing program 3 (id=4161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) 307.907747ms ago: executing program 3 (id=4162): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, &(0x7f0000000080), 0x0}, 0x20) 304.369507ms ago: executing program 4 (id=4163): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x2, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) fstat(r2, &(0x7f0000000000)) 285.494099ms ago: executing program 0 (id=4164): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r3, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}}, 0x0) 123.547111ms ago: executing program 3 (id=4165): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r0}, 0x10) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f00000000c0)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="e4bb98e2876d"}, 0x14) bind$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6fad2fdf34b"}, 0x14) 68.922275ms ago: executing program 0 (id=4166): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_clone3(&(0x7f00000004c0)={0x80, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[0x0], 0x1}, 0x58) 50.402636ms ago: executing program 3 (id=4167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={0x0, r2}, 0x18) 22.890088ms ago: executing program 4 (id=4168): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x0, 0x0, 0x0, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xfffffffffffffdaa) r1 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) 22.395488ms ago: executing program 4 (id=4169): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000140)={0xd84, 0x800000, 0x4, 0x2d011882, 0xcac}) fcntl$addseals(r0, 0x409, 0x5) sendmsg$NFC_CMD_LLC_GET_PARAMS(0xffffffffffffffff, 0x0, 0x40) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) write$cgroup_int(r0, &(0x7f0000000e80)=0x9, 0x12) 6.57589ms ago: executing program 0 (id=4170): r0 = fsopen(&(0x7f0000000000)='hugetlbfs\x00', 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r0, 0x0, 0x0) name_to_handle_at(r2, &(0x7f0000000080)='.\x00', 0x0, 0x0, 0x0) 5.72256ms ago: executing program 3 (id=4171): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f00000005c0)="c4", 0x1}], 0x1}}], 0x2, 0x4008001) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x2, 0x1, [0x0]}, 0xa) 0s ago: executing program 4 (id=4172): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000001c0), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000100)=@NCI_OP_NFCEE_MODE_SET_RSP={0x2, 0x0, 0x2, 0x1, 0x1, 0x1}, 0x4) kernel console output (not intermixed with test programs): 6398444.111:4733): avc: denied { bind } for pid=13547 comm="syz.4.2746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.781183][ T29] audit: type=1400 audit(1726398444.111:4734): avc: denied { name_bind } for pid=13547 comm="syz.4.2746" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 108.803065][ T29] audit: type=1400 audit(1726398444.111:4735): avc: denied { node_bind } for pid=13547 comm="syz.4.2746" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 108.824795][ T29] audit: type=1400 audit(1726398444.111:4736): avc: denied { write } for pid=13547 comm="syz.4.2746" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 108.858310][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.865387][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.951753][T12940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.078338][T12940] veth0_vlan: entered promiscuous mode [ 109.093779][T13592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2759'. [ 109.095330][T12940] veth1_vlan: entered promiscuous mode [ 109.130021][T12940] veth0_macvtap: entered promiscuous mode [ 109.138180][T12940] veth1_macvtap: entered promiscuous mode [ 109.154327][T13604] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 109.175321][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2766'. [ 109.184599][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2766'. [ 109.200586][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.211096][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.221039][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.230254][T13615] SELinux: policydb version -570608695 does not match my version range 15-33 [ 109.231617][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.250470][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.250495][T13615] SELinux: failed to load policy [ 109.260876][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.260888][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.286205][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.296084][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.306505][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.316323][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.326876][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.336709][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.347132][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.373248][T12940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.383287][T13617] netlink: 'syz.3.2768': attribute type 5 has an invalid length. [ 109.392050][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.402527][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.412352][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.422836][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.432778][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.443223][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.453082][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.463509][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.473317][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.483919][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.493852][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.504434][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.514269][T12940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.525063][T12940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.537724][T12940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.566897][T13624] loop4: detected capacity change from 0 to 2048 [ 109.583389][T13632] loop2: detected capacity change from 0 to 512 [ 109.589822][T12940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.597106][T13632] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.2775: invalid block [ 109.598612][T12940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.619148][T12940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.619894][T13632] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2775: invalid indirect mapped block 4294967295 (level 1) [ 109.628002][T12940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.644071][T13632] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.2775: invalid indirect mapped block 4294967295 (level 1) [ 109.681131][T13624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.694943][T13640] atomic_op ffff888112e2d528 conn xmit_atomic 0000000000000000 [ 109.703494][T13624] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 109.728984][T13632] EXT4-fs (loop2): 2 truncates cleaned up [ 109.729748][T13624] EXT4-fs (loop4): Remounting filesystem read-only [ 109.740986][T13632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.770823][ T8195] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.781958][T13648] loop1: detected capacity change from 0 to 2048 [ 109.806654][T13656] loop4: detected capacity change from 0 to 256 [ 109.814021][T13656] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 109.827894][T13648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.840889][T13656] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.868460][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.879321][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.887083][T13665] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 109.903546][T13660] loop3: detected capacity change from 0 to 764 [ 109.911417][T13664] IPVS: stopping master sync thread 13665 ... [ 109.974627][T13683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 109.995161][T13683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.008000][T13688] netlink: 'syz.4.2791': attribute type 3 has an invalid length. [ 110.016971][T13695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2793'. [ 110.030841][T13688] netlink: 'syz.4.2791': attribute type 3 has an invalid length. [ 110.040525][T13695] netlink: 'syz.0.2793': attribute type 10 has an invalid length. [ 110.057181][T13702] loop2: detected capacity change from 0 to 1024 [ 110.066301][T13702] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.068459][T13695] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.108866][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.163806][T13716] loop2: detected capacity change from 0 to 256 [ 110.175528][T13716] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 110.194989][T13716] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 110.244607][T13727] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 110.258937][T13725] loop1: detected capacity change from 0 to 512 [ 110.266899][T13725] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.2805: iget: bad extended attribute block 1 [ 110.279600][T13725] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.2805: couldn't read orphan inode 15 (err -117) [ 110.291991][T13725] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.311063][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.360895][T13744] netlink: 'syz.2.2809': attribute type 3 has an invalid length. [ 110.365077][T13746] loop1: detected capacity change from 0 to 1024 [ 110.378684][T13744] netlink: 'syz.2.2809': attribute type 3 has an invalid length. [ 110.378900][T13746] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.421119][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.435666][T13754] syz.0.2813[13754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.435713][T13754] syz.0.2813[13754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.569852][T13787] loop3: detected capacity change from 0 to 2048 [ 110.633458][T13787] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.651612][T13803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2831'. [ 110.661790][T13803] netlink: 'syz.1.2831': attribute type 10 has an invalid length. [ 110.682431][T13803] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 110.729586][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.767201][T13819] loop2: detected capacity change from 0 to 256 [ 110.782844][T13816] loop0: detected capacity change from 0 to 2048 [ 110.809121][T13819] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001) [ 110.817043][T13819] FAT-fs (loop2): Filesystem has been set read-only [ 110.819455][T13816] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.839688][T13835] loop3: detected capacity change from 0 to 512 [ 110.853496][T13835] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.2833: iget: bad extended attribute block 1 [ 110.872313][T13835] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.2833: couldn't read orphan inode 15 (err -117) [ 110.889205][T13835] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.920998][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.930473][T12940] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.955487][T13845] syz.4.2838[13845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.955533][T13845] syz.4.2838[13845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.993564][T13856] netlink: 'syz.0.2836': attribute type 3 has an invalid length. [ 111.013877][T13865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2840'. [ 111.043183][T13877] netlink: 'syz.3.2840': attribute type 10 has an invalid length. [ 111.067875][T13877] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 111.207923][T13908] loop1: detected capacity change from 0 to 512 [ 111.230385][T13908] EXT4-fs error (device loop1): ext4_get_branch:178: inode #11: block 4294967295: comm syz.1.2851: invalid block [ 111.243271][T13908] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2851: invalid indirect mapped block 4294967295 (level 1) [ 111.274145][T13908] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2851: invalid indirect mapped block 4294967295 (level 1) [ 111.289985][T13908] EXT4-fs (loop1): 2 truncates cleaned up [ 111.296528][T13908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.342980][T13929] syz.0.2858[13929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.343116][T13929] syz.0.2858[13929] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.406157][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.532764][T13976] loop3: detected capacity change from 0 to 512 [ 111.539601][T13976] EXT4-fs: Ignoring removed i_version option [ 111.545657][T13976] EXT4-fs: Ignoring removed nobh option [ 111.551577][T13976] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.562526][T13976] EXT4-fs (loop3): 1 truncate cleaned up [ 111.568472][T13976] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.591161][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.656300][T13993] loop3: detected capacity change from 0 to 512 [ 111.667008][T13993] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.2873: invalid block [ 111.679502][T13993] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2873: invalid indirect mapped block 4294967295 (level 1) [ 111.693679][T13993] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2873: invalid indirect mapped block 4294967295 (level 1) [ 111.708356][T13993] EXT4-fs (loop3): 2 truncates cleaned up [ 111.714617][T13993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.741606][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.786338][T14008] IPv6: Can't replace route, no match found [ 111.818904][T14018] loop2: detected capacity change from 0 to 512 [ 111.825899][T14018] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 111.834652][T14018] EXT4-fs (loop2): invalid journal inode [ 111.842287][T14018] EXT4-fs (loop2): can't get journal size [ 111.857501][T14018] EXT4-fs (loop2): 1 truncate cleaned up [ 111.864880][T14018] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.889367][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.210967][T14084] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 112.222859][T14083] IPVS: stopping master sync thread 14084 ... [ 112.398499][T14102] loop2: detected capacity change from 0 to 512 [ 112.411089][T14102] EXT4-fs: Ignoring removed i_version option [ 112.417146][T14102] EXT4-fs: Ignoring removed nobh option [ 112.432883][T14102] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.455427][T14102] EXT4-fs (loop2): 1 truncate cleaned up [ 112.462978][T14102] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.495539][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.540100][T14118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.544070][T14108] loop1: detected capacity change from 0 to 8192 [ 112.557112][T14118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.647431][T14137] loop1: detected capacity change from 0 to 256 [ 112.657764][T14137] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001) [ 112.665697][T14137] FAT-fs (loop1): Filesystem has been set read-only [ 112.717591][T14148] netlink: 'syz.1.2935': attribute type 3 has an invalid length. [ 112.862643][T14166] loop1: detected capacity change from 0 to 2048 [ 112.888101][T14166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.925786][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.937564][T14181] syz.4.2946[14181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.937751][T14181] syz.4.2946[14181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.040246][T14201] can0: slcan on ttyS3. [ 113.105205][T14201] can0 (unregistered): slcan off ttyS3. [ 113.111969][T14201] Falling back ldisc for ttyS3. [ 113.145108][T14217] loop0: detected capacity change from 0 to 512 [ 113.156586][T14217] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 113.166507][T14217] EXT4-fs (loop0): invalid journal inode [ 113.179240][T14217] EXT4-fs (loop0): can't get journal size [ 113.193723][T14217] EXT4-fs (loop0): 1 truncate cleaned up [ 113.203362][T14217] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.236440][T12940] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.258984][T14231] netlink: 'syz.4.2965': attribute type 2 has an invalid length. [ 113.267043][T14231] netlink: 'syz.4.2965': attribute type 3 has an invalid length. [ 113.274752][T14231] netlink: 11386 bytes leftover after parsing attributes in process `syz.4.2965'. [ 113.300906][T14233] IPv6: Can't replace route, no match found [ 113.335307][ T2926] IPVS: starting estimator thread 0... [ 113.420843][T14255] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 113.436346][T14240] IPVS: using max 2736 ests per chain, 136800 per kthread [ 113.543822][T14278] netlink: 'syz.1.2984': attribute type 4 has an invalid length. [ 113.573840][T14278] netlink: 'syz.1.2984': attribute type 4 has an invalid length. [ 113.607863][ T29] kauditd_printk_skb: 307 callbacks suppressed [ 113.607877][ T29] audit: type=1400 audit(1726398449.101:5044): avc: denied { ioctl } for pid=14283 comm="syz.1.2988" path="socket:[27069]" dev="sockfs" ino=27069 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.641926][T14284] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 113.674746][ T29] audit: type=1400 audit(1726398449.141:5045): avc: denied { write } for pid=14283 comm="syz.1.2988" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 113.751601][T14299] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14299 comm=syz.1.2993 [ 113.786478][ T29] audit: type=1400 audit(1726398449.271:5046): avc: denied { block_suspend } for pid=14300 comm="syz.1.2994" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.809501][ T29] audit: type=1400 audit(1726398449.281:5047): avc: denied { create } for pid=14302 comm="syz.2.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 113.829208][ T29] audit: type=1400 audit(1726398449.281:5048): avc: denied { bind } for pid=14302 comm="syz.2.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 113.848783][ T29] audit: type=1400 audit(1726398449.281:5049): avc: denied { name_bind } for pid=14302 comm="syz.2.2995" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 113.869828][ T29] audit: type=1400 audit(1726398449.281:5050): avc: denied { node_bind } for pid=14302 comm="syz.2.2995" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=dccp_socket permissive=1 [ 113.890757][ T29] audit: type=1400 audit(1726398449.281:5051): avc: denied { listen } for pid=14302 comm="syz.2.2995" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 113.895293][T14318] batadv_slave_0: entered promiscuous mode [ 113.911471][ T29] audit: type=1400 audit(1726398449.281:5052): avc: denied { connect } for pid=14302 comm="syz.2.2995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 113.928195][T14316] batadv_slave_0: left promiscuous mode [ 113.937034][ T29] audit: type=1400 audit(1726398449.281:5053): avc: denied { name_connect } for pid=14302 comm="syz.2.2995" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 114.032366][T14333] loop2: detected capacity change from 0 to 2048 [ 114.046251][T14333] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.069022][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.308386][T14346] loop2: detected capacity change from 0 to 736 [ 114.332334][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'. [ 114.333513][T14346] Symlink component flag not implemented [ 114.341852][T14352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3011'. [ 114.363667][T14346] Symlink component flag not implemented (247) [ 114.418962][T14363] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 114.447865][T14359] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 114.519531][T14369] can0: slcan on ttyS3. [ 114.585093][T14369] can0 (unregistered): slcan off ttyS3. [ 114.592269][T14369] Falling back ldisc for ttyS3. [ 114.649268][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'. [ 114.658641][T14389] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3023'. [ 114.907198][T14417] loop4: detected capacity change from 0 to 512 [ 114.922190][T14417] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 114.922684][T14415] x_tables: duplicate underflow at hook 1 [ 114.940908][T14417] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 114.952542][T14417] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.963974][T14417] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 114.980908][T14417] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 114.987679][T14417] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #13: comm syz.4.3032: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 115.007007][T14417] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3032: couldn't read orphan inode 13 (err -117) [ 115.025318][T14417] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 115.034786][T14417] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 115.044810][T14417] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 8 [ 115.673537][T14489] loop2: detected capacity change from 0 to 512 [ 115.696527][T14489] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 115.711368][T14489] EXT4-fs (loop2): mount failed [ 115.890405][T14518] loop1: detected capacity change from 0 to 512 [ 115.906457][T14518] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.936941][T14524] loop1: detected capacity change from 0 to 7 [ 115.943066][T14524] Buffer I/O error on dev loop1, logical block 0, async page read [ 115.951266][T14524] Buffer I/O error on dev loop1, logical block 0, async page read [ 115.959127][T14524] loop1: unable to read partition table [ 115.967246][T14524] loop_reread_partitions: partition scan of loop1 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 115.967246][T14524] ) failed (rc=-5) [ 115.983786][T14526] loop4: detected capacity change from 0 to 512 [ 115.996652][T14526] EXT4-fs warning (device loop4): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.012965][T14526] EXT4-fs (loop4): mount failed [ 116.074788][T14545] loop1: detected capacity change from 0 to 512 [ 116.083056][T14545] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.093245][T14545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 116.102071][T14545] EXT4-fs (loop1): orphan cleanup on readonly fs [ 116.108967][T14545] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 116.125578][T14545] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 116.132517][T14545] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.3085: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 116.150664][T14545] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3085: couldn't read orphan inode 13 (err -117) [ 116.171815][T14545] EXT4-fs (loop1): warning: mounting fs with errors, running e2fsck is recommended [ 116.181316][T14545] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 116.189496][T14545] EXT4-fs warning (device loop1): read_mmp_block:115: Error -117 while reading MMP block 8 [ 116.219089][T14556] tls_set_device_offload: netdev not found [ 116.248778][T14560] loop3: detected capacity change from 0 to 736 [ 116.268516][T14566] ALSA: seq fatal error: cannot create timer (-22) [ 116.271034][T14560] Symlink component flag not implemented [ 116.281235][T14560] Symlink component flag not implemented (247) [ 116.329725][T14579] loop3: detected capacity change from 0 to 512 [ 116.348395][T14579] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 116.363550][T14579] EXT4-fs (loop3): mount failed [ 116.418780][T14597] loop3: detected capacity change from 0 to 512 [ 116.426474][T14597] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.437225][T14597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 116.445432][T14597] EXT4-fs (loop3): orphan cleanup on readonly fs [ 116.452097][T14597] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 116.467724][T14597] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 116.474423][T14597] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #13: comm syz.3.3102: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 116.492725][T14597] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.3102: couldn't read orphan inode 13 (err -117) [ 116.509625][T14597] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 116.519795][T14597] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8816c018, mo2=0002] [ 116.532435][T14597] EXT4-fs warning (device loop3): read_mmp_block:115: Error -117 while reading MMP block 8 [ 116.620063][T14618] SELinux: policydb version -1682183729 does not match my version range 15-33 [ 116.629862][T14618] SELinux: failed to load policy [ 116.668866][T14629] loop4: detected capacity change from 0 to 1024 [ 116.679516][T14629] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 116.689248][T14629] EXT4-fs (loop4): group descriptors corrupted! [ 116.723669][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3119'. [ 116.742989][T14636] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.759208][T14648] ªªªªªª: renamed from vlan0 (while UP) [ 116.799317][T14657] loop3: detected capacity change from 0 to 512 [ 116.825273][T14657] ext4 filesystem being mounted at /648/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.837842][T14664] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3132'. [ 116.849656][T14657] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.3129: corrupted inode contents [ 116.875004][T14657] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz.3.3129: mark_inode_dirty error [ 116.891605][T14673] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 116.901358][T14657] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.3129: corrupted inode contents [ 116.925654][T14657] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.3129: mark_inode_dirty error [ 116.951992][T14657] EXT4-fs warning (device loop3): ext4_empty_dir:3096: inode #18: comm syz.3.3129: directory missing '.' [ 118.501245][T14687] loop3: detected capacity change from 0 to 512 [ 118.526850][T14687] EXT4-fs (loop3): unsupported inode size: 0 [ 118.532933][T14687] EXT4-fs (loop3): blocksize: 1024 [ 118.573348][T14699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3145'. [ 118.646297][ T29] kauditd_printk_skb: 262 callbacks suppressed [ 118.646311][ T29] audit: type=1400 audit(1726398454.141:5313): avc: denied { mounton } for pid=14704 comm="syz.3.3148" path="/650/bus" dev="tmpfs" ino=3390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.697426][ T29] audit: type=1400 audit(1726398454.191:5314): avc: denied { read write } for pid=14706 comm="syz.2.3149" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.721414][ T29] audit: type=1400 audit(1726398454.191:5315): avc: denied { open } for pid=14706 comm="syz.2.3149" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 118.757999][T14712] loop1: detected capacity change from 0 to 512 [ 118.784590][ T29] audit: type=1400 audit(1726398454.271:5316): avc: denied { setcurrent } for pid=14723 comm="syz.4.3156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 118.804259][ T29] audit: type=1401 audit(1726398454.271:5317): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 118.829156][T14712] Quota error (device loop1): v2_read_file_info: Block with free entry 5 out of range (1, 0). [ 118.863992][ T29] audit: type=1400 audit(1726398454.301:5318): avc: denied { shutdown } for pid=14727 comm="syz.3.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.866550][T14712] EXT4-fs warning (device loop1): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 118.883917][ T29] audit: type=1400 audit(1726398454.301:5319): avc: denied { connect } for pid=14727 comm="syz.3.3157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 118.908188][T14712] EXT4-fs (loop1): mount failed [ 118.918082][ T29] audit: type=1400 audit(1726398454.301:5320): avc: denied { name_connect } for pid=14727 comm="syz.3.3157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 118.930042][T14740] loop4: detected capacity change from 0 to 1024 [ 118.950193][T14740] EXT4-fs: Ignoring removed nomblk_io_submit option [ 118.958245][ T29] audit: type=1326 audit(1726398454.441:5321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14729 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 119.005278][T14740] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 119.019285][T14740] System zones: 0-1, 3-12 [ 119.178975][T14795] vlan2: entered allmulticast mode [ 119.332938][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 119.382909][T14818] loop3: detected capacity change from 0 to 2048 [ 119.393636][T14821] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 119.425461][T14818] loop3: p1 < > p4 [ 119.430074][T14818] loop3: p4 size 8388608 extends beyond EOD, truncated [ 119.508547][T14850] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 120.058899][T14867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3208'. [ 120.089953][T14871] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=14871 comm=syz.0.3210 [ 120.138426][T14877] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.145587][T14877] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.153054][T14877] bridge0: entered allmulticast mode [ 120.171038][T14877] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.178172][T14877] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.185411][T14877] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.192476][T14877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.199928][T14877] bridge0: entered promiscuous mode [ 120.222562][T14881] loop2: detected capacity change from 0 to 128 [ 120.234336][T14883] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 123.022619][T14917] loop1: detected capacity change from 0 to 256 [ 123.041467][T14920] loop3: detected capacity change from 0 to 1024 [ 123.043280][T14917] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 123.078220][T14917] Process accounting resumed [ 123.097203][T14926] loop2: detected capacity change from 0 to 1024 [ 123.122192][T14926] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 123.133211][T14926] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 123.156219][T14926] JBD2: no valid journal superblock found [ 123.162045][T14926] EXT4-fs (loop2): Could not load journal inode [ 123.213951][T14944] loop3: detected capacity change from 0 to 1024 [ 123.228261][T14944] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.242979][T14944] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 123.289791][T14944] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 123.313440][T14917] Process accounting resumed [ 123.330485][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.337954][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.345380][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.350684][T14956] loop4: detected capacity change from 0 to 1024 [ 123.352755][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.366503][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.371238][T14956] EXT4-fs: Ignoring removed mblk_io_submit option [ 123.373937][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.387725][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.395204][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.402636][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.410066][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.417467][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.424937][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.432368][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.439806][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.447202][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.454572][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.462015][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.469424][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.476837][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.484208][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.491644][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.499028][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.506442][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.513822][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.521224][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.528672][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.536069][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.543523][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.550931][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.558321][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.565715][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.573158][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.580593][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.588014][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.595430][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.602795][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.610269][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.617630][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.625002][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.632361][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.639736][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.647100][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.654469][ T981] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 123.663572][ T29] kauditd_printk_skb: 396 callbacks suppressed [ 123.663615][ T29] audit: type=1326 audit(1726398459.151:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 123.665914][ T981] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 123.712811][ T29] audit: type=1326 audit(1726398459.191:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 123.736336][ T29] audit: type=1326 audit(1726398459.191:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 123.759975][ T29] audit: type=1326 audit(1726398459.191:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14966 comm="syz.0.3240" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 123.806772][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3242'. [ 123.871465][T15003] loop0: detected capacity change from 0 to 1024 [ 123.874012][T15004] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3248'. [ 123.903285][ T29] audit: type=1400 audit(1726398459.391:5722): avc: denied { execmem } for pid=15009 comm="syz.3.3251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 123.943973][ T29] audit: type=1400 audit(1726398459.431:5723): avc: denied { create } for pid=15013 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 123.975216][T15003] loop0: detected capacity change from 1024 to 0 [ 123.994664][ T29] audit: type=1400 audit(1726398459.471:5724): avc: denied { write } for pid=15013 comm="syz.1.3253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 124.015733][T15003] syz.0.3247: attempt to access beyond end of device [ 124.015733][T15003] loop0: rw=12288, sector=162, nr_sectors = 2 limit=0 [ 124.017696][ T29] audit: type=1400 audit(1726398459.511:5725): avc: denied { setattr } for pid=15001 comm="syz.0.3247" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.045177][T15003] Quota error (device loop0): find_tree_dqentry: Can't read quota tree block 1 [ 124.059958][T15003] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0 [ 124.059979][T15003] EXT4-fs error (device loop0): ext4_acquire_dquot:6848: comm syz.0.3247: Failed to acquire dquot type 0 [ 124.091765][T15003] syz.0.3247: attempt to access beyond end of device [ 124.091765][T15003] loop0: rw=2049, sector=2, nr_sectors = 2 limit=0 [ 124.094129][T15027] loop1: detected capacity change from 0 to 1024 [ 124.104820][T15003] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 124.125952][T15027] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 124.135833][T15027] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 124.152597][T15027] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 124.153831][T15003] EXT4-fs (loop0): I/O error while writing superblock [ 124.163406][T15027] EXT4-fs error (device loop1): ext4_get_journal_inode:5740: inode #5: comm syz.1.3256: unexpected bad inode w/o EXT4_IGET_BAD [ 124.204176][T15027] EXT4-fs (loop1): no journal found [ 124.209426][T15027] EXT4-fs (loop1): can't get journal size [ 124.218347][T12940] syz-executor: attempt to access beyond end of device [ 124.218347][T12940] loop0: rw=2049, sector=2, nr_sectors = 2 limit=0 [ 124.231612][T12940] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 124.247429][T15027] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.3256: bg 0: block 32: padding at end of block bitmap is not set [ 124.280577][T12940] EXT4-fs (loop0): I/O error while writing superblock [ 124.324590][T15047] Illegal XDP return value 4294967274 on prog (id 2198) dev N/A, expect packet loss! [ 124.927787][T15077] syz.2.3275[15077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.927839][T15077] syz.2.3275[15077] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.952515][T15079] loop4: detected capacity change from 0 to 512 [ 124.997341][T15082] hub 9-0:1.0: USB hub found [ 125.007461][T15079] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.009221][T15082] hub 9-0:1.0: 8 ports detected [ 125.081778][T15098] loop1: detected capacity change from 0 to 512 [ 125.104548][T15101] loop2: detected capacity change from 0 to 512 [ 125.120754][T15101] EXT4-fs: Ignoring removed i_version option [ 125.132749][T15098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 125.147145][T15101] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.162677][T15101] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 125.187904][T15101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b056e118, mo2=0002] [ 125.209048][T15101] System zones: 1-12 [ 125.213177][T15101] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.3284: corrupted in-inode xattr: e_value size too large [ 125.227528][T15101] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.3284: couldn't read orphan inode 15 (err -117) [ 126.499188][T15140] loop4: detected capacity change from 0 to 512 [ 126.520085][T15140] EXT4-fs: Ignoring removed bh option [ 126.528752][T15140] EXT4-fs error (device loop4): __ext4_iget:4985: inode #15: block 1803188595: comm syz.4.3298: invalid block [ 126.540568][T15140] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.3298: couldn't read orphan inode 15 (err -117) [ 126.586949][T15160] netlink: 'syz.0.3306': attribute type 5 has an invalid length. [ 126.602644][T15140] loop4: detected capacity change from 512 to 11 [ 126.631968][T15167] loop2: detected capacity change from 0 to 512 [ 126.634167][ T8195] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 126.652515][ T8195] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5810: Out of memory [ 126.663579][ T8195] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 126.697215][T15167] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.3309: invalid block [ 126.713398][T15178] loop3: detected capacity change from 0 to 256 [ 126.721068][T15179] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 126.747751][T15167] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3309: invalid indirect mapped block 4294967295 (level 1) [ 126.771433][T15167] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.3309: invalid indirect mapped block 4294967295 (level 1) [ 126.778409][T15188] netlink: 'syz.3.3318': attribute type 10 has an invalid length. [ 126.793273][T15188] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3318'. [ 126.805349][T15188] bridge0: port 3(ipvlan0) entered blocking state [ 126.811856][T15188] bridge0: port 3(ipvlan0) entered disabled state [ 126.818555][T15188] ipvlan0: entered allmulticast mode [ 126.823965][T15188] veth0_vlan: entered allmulticast mode [ 126.825384][T15167] EXT4-fs (loop2): 2 truncates cleaned up [ 126.842591][T15188] ipvlan0: left allmulticast mode [ 126.845811][T15167] EXT4-fs mount: 29 callbacks suppressed [ 126.845824][T15167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 126.847724][T15188] veth0_vlan: left allmulticast mode [ 126.873191][T15188] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 126.908036][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.917495][T15194] syzkaller1: entered promiscuous mode [ 126.919742][T15193] loop1: detected capacity change from 0 to 512 [ 126.922969][T15194] syzkaller1: entered allmulticast mode [ 126.951180][T15193] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.967607][T15193] EXT4-fs (loop1): 1 truncate cleaned up [ 126.973606][T15193] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.005258][ T8898] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.015006][T12502] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.034547][T15214] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 127.067354][T15219] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 127.120213][T15229] loop2: detected capacity change from 0 to 512 [ 127.136561][T15229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.149237][T15229] ext4 filesystem being mounted at /656/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.177344][T15237] program syz.1.3336 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.194473][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.242568][ T1650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.311913][ T1650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.389212][T15275] netlink: 'syz.0.3352': attribute type 3 has an invalid length. [ 127.409279][ T1650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.438026][T15284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3355'. [ 127.479716][ T1650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.593051][ T1650] bridge_slave_1: left allmulticast mode [ 127.598898][ T1650] bridge_slave_1: left promiscuous mode [ 127.604638][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.617046][ T1650] bridge_slave_0: left allmulticast mode [ 127.622703][ T1650] bridge_slave_0: left promiscuous mode [ 127.628438][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.734162][T15349] loop2: detected capacity change from 0 to 512 [ 127.741306][T15349] EXT4-fs (loop2): unsupported inode size: 0 [ 127.747362][T15349] EXT4-fs (loop2): blocksize: 1024 [ 127.757064][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.768159][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 127.779513][T15351] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 127.794736][ T1650] bond0 (unregistering): Released all slaves [ 127.804123][T15351] vhci_hcd: invalid port number 23 [ 127.809370][T15351] vhci_hcd: Wrong hub descriptor type for USB 3.0 roothub. [ 127.819059][ T1650] bond1 (unregistering): Released all slaves [ 127.907637][T15411] SELinux: failed to load policy [ 127.983372][T15264] chnl_net:caif_netlink_parms(): no params data found [ 128.080650][T15508] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3381'. [ 128.096902][ T1650] hsr_slave_0: left promiscuous mode [ 128.105195][ T1650] hsr_slave_1: left promiscuous mode [ 128.124186][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.131750][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.166118][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.173518][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.228516][ T1650] veth1_macvtap: left promiscuous mode [ 128.234004][ T1650] veth0_macvtap: left promiscuous mode [ 128.239602][ T1650] veth1_vlan: left promiscuous mode [ 128.244818][ T1650] veth0_vlan: left promiscuous mode [ 128.535369][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 129.118099][ T1650] IPVS: stop unused estimator thread 0... [ 129.998009][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 129.998022][ T29] audit: type=1326 audit(1726398466.495:5907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e675def9 code=0x7ffc0000 [ 130.027805][ T29] audit: type=1326 audit(1726398466.495:5908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e675def9 code=0x7ffc0000 [ 130.027826][ T29] audit: type=1326 audit(1726398466.495:5909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f57e675def9 code=0x7ffc0000 [ 130.074976][ T29] audit: type=1326 audit(1726398466.495:5910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e675def9 code=0x7ffc0000 [ 130.098933][ T29] audit: type=1326 audit(1726398466.495:5911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15528 comm="syz.1.3385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57e675def9 code=0x7ffc0000 [ 130.163249][T15264] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.170496][T15264] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.179119][T15264] bridge_slave_0: entered allmulticast mode [ 130.185782][T15264] bridge_slave_0: entered promiscuous mode [ 130.193243][T15264] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.200383][T15264] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.208850][T15264] bridge_slave_1: entered allmulticast mode [ 130.215390][T15264] bridge_slave_1: entered promiscuous mode [ 130.261652][T15264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 130.271311][T15567] usb usb8: usbfs: process 15567 (syz.3.3391) did not claim interface 0 before use [ 130.283117][T15264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.336412][ T29] audit: type=1326 audit(1726398466.825:5912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15617 comm="syz.3.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd135c6def9 code=0x7ffc0000 [ 130.359991][ T29] audit: type=1326 audit(1726398466.825:5913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15617 comm="syz.3.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd135c6def9 code=0x7ffc0000 [ 130.363183][T15625] loop0: detected capacity change from 0 to 2048 [ 130.383457][ T29] audit: type=1326 audit(1726398466.825:5914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15617 comm="syz.3.3396" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fd135c6def9 code=0x7ffc0000 [ 130.415014][T15264] team0: Port device team_slave_0 added [ 130.421564][T15625] loop0: p1 < > p4 [ 130.429008][ T29] audit: type=1326 audit(1726398466.925:5915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.2.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef727def9 code=0x7ffc0000 [ 130.430073][T15264] team0: Port device team_slave_1 added [ 130.452598][ T29] audit: type=1326 audit(1726398466.925:5916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15631 comm="syz.2.3399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ef727def9 code=0x7ffc0000 [ 130.476836][T15625] loop0: p4 size 8388608 extends beyond EOD, truncated [ 130.510000][T15264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.516971][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.542873][T15264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.561652][T15264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.568687][T15264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.594886][T15264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.632528][T15681] loop2: detected capacity change from 0 to 1024 [ 130.639176][T15681] EXT4-fs: Ignoring removed oldalloc option [ 130.647164][T15264] hsr_slave_0: entered promiscuous mode [ 130.653272][T15264] hsr_slave_1: entered promiscuous mode [ 130.658625][T15681] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 130.668686][T15264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.676355][T15264] Cannot create hsr debugfs directory [ 130.676497][T15681] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.781488][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.910046][T15787] loop2: detected capacity change from 0 to 512 [ 130.924270][T15264] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.933979][T15787] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.948202][T15787] ext4 filesystem being mounted at /678/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.949820][T15264] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.969887][T15264] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.979238][T15264] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.990721][T15787] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz.2.3409: path /678/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 131.027763][T15264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.034384][T15787] EXT4-fs (loop2): Remounting filesystem read-only [ 131.054642][T15264] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.072518][ T3357] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.079589][ T3357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.123891][ T3357] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.131061][ T3357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.193651][T15806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3410'. [ 131.233572][T15264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.291011][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3413'. [ 131.409200][T15833] loop3: detected capacity change from 0 to 512 [ 131.429715][T15833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.442569][T15833] ext4 filesystem being mounted at /703/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.465688][T15264] veth0_vlan: entered promiscuous mode [ 131.477200][T15264] veth1_vlan: entered promiscuous mode [ 131.503172][T15264] veth0_macvtap: entered promiscuous mode [ 131.510836][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.524428][T15843] netem: incorrect gi model size [ 131.529720][T15843] netem: change failed [ 131.537492][T15264] veth1_macvtap: entered promiscuous mode [ 131.558318][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.568861][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.570407][T15848] syz.3.3422[15848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.578752][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.590250][T15848] syz.3.3422[15848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 131.600611][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.600624][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.600639][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.642191][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.652727][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.662540][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.672976][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.682872][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.693322][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.703254][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.713691][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.726568][T15264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.765812][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.776339][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.786150][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.796575][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.806405][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.816834][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.822282][T15859] loop0: detected capacity change from 0 to 1024 [ 131.828882][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.828898][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.828907][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.865878][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.875777][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.886246][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.892759][T15859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.896256][T15264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.896271][T15264] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.910966][T15264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.936030][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.938671][T15264] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.953675][T15264] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.963060][T15264] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.971794][T15264] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.984749][T12940] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.044548][T15874] hub 9-0:1.0: USB hub found [ 132.053639][T15874] hub 9-0:1.0: 8 ports detected [ 132.061850][T15881] syz.4.3343[15881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.061907][T15881] syz.4.3343[15881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.093955][T15884] netlink: 'syz.2.3441': attribute type 2 has an invalid length. [ 132.140129][T15905] syz.4.3432[15905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.140183][T15905] syz.4.3432[15905] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.181008][T15915] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 132.243286][T15924] loop2: detected capacity change from 0 to 2048 [ 132.275459][T15924] loop2: p1 < > p4 [ 132.280024][T15924] loop2: p4 size 8388608 extends beyond EOD, truncated [ 132.305603][T15926] netlink: 'syz.3.3443': attribute type 3 has an invalid length. [ 132.343249][T15941] hub 9-0:1.0: USB hub found [ 132.353268][T15941] hub 9-0:1.0: 8 ports detected [ 132.401198][T15951] vlan2: entered allmulticast mode [ 132.426993][T15955] loop2: detected capacity change from 0 to 2048 [ 132.456941][T15955] loop2: p1 < > p4 [ 132.467798][T15955] loop2: p4 size 8388608 extends beyond EOD, truncated [ 132.514372][T15965] loop3: detected capacity change from 0 to 1024 [ 132.522798][T15965] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.537074][T15965] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.564022][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.567603][T15977] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 132.712861][T16014] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 132.732025][T16015] hub 9-0:1.0: USB hub found [ 132.738768][T16015] hub 9-0:1.0: 8 ports detected [ 132.828923][T16033] loop2: detected capacity change from 0 to 1024 [ 132.841982][T16033] EXT4-fs: Ignoring removed mblk_io_submit option [ 132.856263][T16033] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.857109][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.876139][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.883566][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.890985][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.898656][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.900596][T16044] loop1: detected capacity change from 0 to 512 [ 132.906085][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.906109][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.913797][T16044] EXT4-fs: Ignoring removed bh option [ 132.919800][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.930495][T16044] EXT4-fs error (device loop1): __ext4_iget:4985: inode #15: block 1803188595: comm syz.1.3473: invalid block [ 132.932543][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.940058][T16044] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.3473: couldn't read orphan inode 15 (err -117) [ 132.951396][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.960678][T16044] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.970633][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 132.990297][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.997303][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.013775][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.021152][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.028524][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.035913][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.043333][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.050770][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.058131][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.065593][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.073018][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.080435][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.087886][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.095264][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.102629][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.110042][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.117562][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.124930][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.132306][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.139684][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.147067][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.154503][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.161922][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.169299][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.176663][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.184014][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.191448][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.198843][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.206288][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.213649][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.221034][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.228414][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.235840][ T24] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 133.259198][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3475'. [ 133.274743][ T24] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz0] on syz0 [ 133.295536][T16044] loop1: detected capacity change from 512 to 11 [ 133.309467][T12502] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -12 reading directory block [ 133.346443][T12502] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5810: Out of memory [ 133.356375][T12502] EXT4-fs error (device loop1): ext4_dirty_inode:6014: inode #2: comm syz-executor: mark_inode_dirty error [ 133.388370][T14827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.522791][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.530310][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.537819][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.545487][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.552857][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.560333][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.567719][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.575197][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.582566][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.590042][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.597470][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.604927][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.612404][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.620013][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.627407][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.634766][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.642201][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.649586][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.656950][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.664306][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.671670][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.679175][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.686633][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.694061][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.701476][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.708840][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.716201][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.723582][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.730968][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.738367][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.745744][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.753119][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.760504][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.767886][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.775286][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.782654][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.790214][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.797701][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.805116][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.812582][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.819943][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.827324][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.834688][ T2926] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 133.842538][T16112] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 133.871190][T16117] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.876176][ T2926] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 133.878531][T16117] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.895953][T16117] bridge0: entered allmulticast mode [ 133.918932][T16117] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.926099][T16117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.933462][T16117] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.940553][T16117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.947961][T16117] bridge0: entered promiscuous mode [ 133.988846][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.048660][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.129161][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.164813][T16150] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3510'. [ 134.192276][ T40] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.263286][ T40] bridge_slave_1: left allmulticast mode [ 134.269008][ T40] bridge_slave_1: left promiscuous mode [ 134.274614][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.282369][ T40] bridge_slave_0: left allmulticast mode [ 134.288113][ T40] bridge_slave_0: left promiscuous mode [ 134.293687][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.349661][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.357172][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.361508][T16198] loop2: detected capacity change from 0 to 512 [ 134.364573][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.378240][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.385696][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.393164][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.397717][T16198] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.400680][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.413286][T16198] ext4 filesystem being mounted at /704/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.420361][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.438207][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.442812][T16198] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3515: corrupted inode contents [ 134.445592][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.459482][T16198] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.3515: mark_inode_dirty error [ 134.464959][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.478075][T16198] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.3515: corrupted inode contents [ 134.483366][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.483387][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.483408][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.496798][T16198] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz.2.3515: mark_inode_dirty error [ 134.502442][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.502522][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.543096][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.550607][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.558055][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.565459][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.572819][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.580230][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.587724][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.595103][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.602489][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.609895][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.617262][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.624657][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.632016][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.639436][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.646841][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.654197][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.661617][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.668988][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.676349][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.683753][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.691160][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.698556][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.705926][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.713363][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.720935][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.728443][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.735876][ T2926] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 134.757141][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.768668][ T2926] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz0 [ 134.858187][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.881900][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.903777][ T40] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 134.920800][ T40] bond0 (unregistering): Released all slaves [ 134.958457][T16245] netlink: 'syz.0.3531': attribute type 21 has an invalid length. [ 134.966363][T16245] IPv6: NLM_F_CREATE should be specified when creating new route [ 135.078317][T16360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3542'. [ 135.096754][T16139] chnl_net:caif_netlink_parms(): no params data found [ 135.115019][T16359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3541'. [ 135.130395][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 135.130407][ T29] audit: type=1400 audit(1726398471.605:6051): avc: denied { ioctl } for pid=16361 comm="syz.2.3543" path="socket:[31444]" dev="sockfs" ino=31444 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 135.208802][ T29] audit: type=1400 audit(1726398471.695:6052): avc: denied { create } for pid=16374 comm="syz.0.3544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.228483][ T29] audit: type=1400 audit(1726398471.695:6053): avc: denied { map } for pid=16374 comm="syz.0.3544" path="socket:[31811]" dev="sockfs" ino=31811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.251625][ T29] audit: type=1400 audit(1726398471.695:6054): avc: denied { read } for pid=16374 comm="syz.0.3544" path="socket:[31811]" dev="sockfs" ino=31811 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 135.292743][ T40] hsr_slave_0: left promiscuous mode [ 135.299644][ T29] audit: type=1326 audit(1726398471.795:6055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.4.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 135.323361][ T29] audit: type=1326 audit(1726398471.795:6056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.4.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 135.346860][ T29] audit: type=1326 audit(1726398471.795:6057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.4.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 135.370381][ T29] audit: type=1326 audit(1726398471.795:6058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.4.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 135.394010][ T29] audit: type=1326 audit(1726398471.795:6059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16413 comm="syz.4.3548" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 135.417588][ T40] hsr_slave_1: left promiscuous mode [ 135.429404][T16410] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3547'. [ 135.438732][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.446206][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.453976][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.460105][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3552'. [ 135.461464][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 135.487623][ T29] audit: type=1326 audit(1726398471.975:6060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16425 comm="syz.3.3553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd135c6def9 code=0x7ffc0000 [ 135.523723][ T40] veth1_macvtap: left promiscuous mode [ 135.529243][ T40] veth0_macvtap: left promiscuous mode [ 135.534809][ T40] veth1_vlan: left promiscuous mode [ 135.540070][ T40] veth0_vlan: left promiscuous mode [ 135.642015][ T40] team0 (unregistering): Port device team_slave_1 removed [ 135.651851][ T40] team0 (unregistering): Port device team_slave_0 removed [ 135.708551][T16139] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.715693][T16139] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.728506][T16139] bridge_slave_0: entered allmulticast mode [ 135.737960][T16139] bridge_slave_0: entered promiscuous mode [ 135.751636][T16139] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.758719][T16139] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.767880][T16139] bridge_slave_1: entered allmulticast mode [ 135.774687][T16139] bridge_slave_1: entered promiscuous mode [ 135.799303][T16139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.810258][T16139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.844971][T16139] team0: Port device team_slave_0 added [ 135.852265][T16139] team0: Port device team_slave_1 added [ 135.885221][T16139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.892281][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.918224][T16139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.929449][T16139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.936462][T16139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.962423][T16139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.016588][T16139] hsr_slave_0: entered promiscuous mode [ 136.023437][T16139] hsr_slave_1: entered promiscuous mode [ 136.031829][T16139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.039534][T16139] Cannot create hsr debugfs directory [ 136.149427][T16696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3586'. [ 136.167890][T16696] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3586'. [ 136.224260][T16713] loop3: detected capacity change from 0 to 1024 [ 136.240234][T16713] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.301313][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.344043][T16728] IPv6: NLM_F_CREATE should be specified when creating new route [ 136.440505][T16749] __nla_validate_parse: 1 callbacks suppressed [ 136.440520][T16749] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3601'. [ 136.470329][T16756] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 136.485376][T16139] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 136.502873][T16139] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 136.527117][T16139] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 136.548724][T16139] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 136.642784][T16139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.670341][T16139] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.687796][ T1650] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.694881][ T1650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.707154][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.714216][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.750336][T16139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 136.760769][T16139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 136.832381][T16139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.913080][T16139] veth0_vlan: entered promiscuous mode [ 136.923784][T16139] veth1_vlan: entered promiscuous mode [ 136.942807][T16139] veth0_macvtap: entered promiscuous mode [ 136.950912][T16139] veth1_macvtap: entered promiscuous mode [ 136.964993][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.975750][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.985677][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.996215][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.006079][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.016597][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.026544][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.037004][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.046851][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.057250][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.067050][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.077464][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.087255][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.097651][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.112353][T16139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.122407][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.133139][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.143027][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.153563][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.163382][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.173810][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.183635][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.194074][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.204030][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.214561][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.224499][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.235020][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.244898][T16139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.255336][T16139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.270085][T16139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.289443][T16139] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.298225][T16139] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.307124][T16139] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.315954][T16139] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.370385][T16864] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 137.396992][T16870] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3638'. [ 137.454657][T16875] loop4: detected capacity change from 0 to 1024 [ 137.492046][T16875] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 137.501952][T16875] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 137.514982][T16875] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 137.529055][T16875] EXT4-fs error (device loop4): ext4_get_journal_inode:5740: inode #5: comm syz.4.3640: unexpected bad inode w/o EXT4_IGET_BAD [ 137.542607][T16875] EXT4-fs (loop4): no journal found [ 137.547847][T16875] EXT4-fs (loop4): can't get journal size [ 137.556552][T16875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.572817][T16875] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.3640: bg 0: block 32: padding at end of block bitmap is not set [ 137.605776][T15264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.635623][T16912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3654'. [ 137.727584][T16929] loop1: detected capacity change from 0 to 512 [ 137.747377][T16929] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.774053][T16929] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.809168][T16929] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 137.823780][T16929] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 137.836109][T16929] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.836109][T16929] [ 137.845845][T16929] EXT4-fs (loop1): Total free blocks count 0 [ 137.851837][T16929] EXT4-fs (loop1): Free/Dirty block details [ 137.857754][T16929] EXT4-fs (loop1): free_blocks=65280 [ 137.863050][T16929] EXT4-fs (loop1): dirty_blocks=2 [ 137.868084][T16929] EXT4-fs (loop1): Block reservation details [ 137.874056][T16929] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 137.904838][T16139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.920513][T16962] loop2: detected capacity change from 0 to 1024 [ 137.930458][T16962] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 137.940258][T16962] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 137.950005][T16962] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 137.960410][T16962] EXT4-fs error (device loop2): ext4_get_journal_inode:5740: inode #5: comm syz.2.3663: unexpected bad inode w/o EXT4_IGET_BAD [ 137.975366][T16962] EXT4-fs (loop2): no journal found [ 137.980569][T16962] EXT4-fs (loop2): can't get journal size [ 137.993160][T16962] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.018071][T16962] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3663: bg 0: block 32: padding at end of block bitmap is not set [ 138.087975][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.292627][T17025] loop2: detected capacity change from 0 to 512 [ 138.323724][T17025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.340335][T17025] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.351222][T17036] netlink: 'syz.4.3692': attribute type 10 has an invalid length. [ 138.359093][T17036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3692'. [ 138.372237][T17036] bridge0: port 3(ipvlan0) entered blocking state [ 138.378853][T17036] bridge0: port 3(ipvlan0) entered disabled state [ 138.387007][T17036] ipvlan0: entered allmulticast mode [ 138.392308][T17036] veth0_vlan: entered allmulticast mode [ 138.398595][T17036] ipvlan0: left allmulticast mode [ 138.403629][T17036] veth0_vlan: left allmulticast mode [ 138.410006][T17036] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 138.498181][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.575971][T17078] netlink: 'syz.2.3714': attribute type 21 has an invalid length. [ 138.583816][T17078] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.604302][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3705'. [ 138.759069][T17116] netlink: 'syz.1.3720': attribute type 21 has an invalid length. [ 138.766959][T17116] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.957159][T17155] sctp: [Deprecated]: syz.2.3738 (pid 17155) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.957159][T17155] Use struct sctp_sack_info instead [ 139.026693][T17161] loop1: detected capacity change from 0 to 2048 [ 139.038060][T17161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.122439][T17180] loop2: detected capacity change from 0 to 512 [ 139.137118][T16139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.168747][T17180] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.181323][T17180] ext4 filesystem being mounted at /748/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.207269][T17189] loop1: detected capacity change from 0 to 256 [ 139.226751][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.244889][T17194] loop1: detected capacity change from 0 to 128 [ 139.254102][T17194] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 139.268320][T17194] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.301865][T16139] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.428851][T17216] netlink: 'syz.0.3760': attribute type 3 has an invalid length. [ 140.064138][T17258] loop4: detected capacity change from 0 to 512 [ 140.091230][T17258] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.103811][T17258] ext4 filesystem being mounted at /71/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.136339][ T29] kauditd_printk_skb: 308 callbacks suppressed [ 140.136353][ T29] audit: type=1400 audit(1726398477.634:6369): avc: denied { bind } for pid=17275 comm="syz.0.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.162146][ T29] audit: type=1400 audit(1726398477.634:6370): avc: denied { setopt } for pid=17275 comm="syz.0.3777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 140.204109][T17274] loop2: detected capacity change from 0 to 1024 [ 140.213037][T17274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.279383][ T29] audit: type=1400 audit(1726398477.774:6371): avc: denied { setattr } for pid=17273 comm="syz.2.3776" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 140.285118][T17274] loop2: detected capacity change from 1024 to 0 [ 140.309917][T17284] syz.2.3776: attempt to access beyond end of device [ 140.309917][T17284] loop2: rw=12288, sector=164, nr_sectors = 2 limit=0 [ 140.323989][T15264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.347934][ T29] audit: type=1400 audit(1726398477.834:6372): avc: denied { bind } for pid=17290 comm="syz.3.3783" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.349263][T17284] Quota error (device loop2): find_tree_dqentry: Can't read quota tree block 2 [ 140.368299][ T29] audit: type=1400 audit(1726398477.834:6373): avc: denied { node_bind } for pid=17290 comm="syz.3.3783" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 140.377253][T17284] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 140.377272][T17284] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.3776: Failed to acquire dquot type 0 [ 140.419866][ T29] audit: type=1400 audit(1726398477.834:6374): avc: denied { connect } for pid=17290 comm="syz.3.3783" laddr=172.20.20.170 lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 140.428411][T17284] syz.2.3776: attempt to access beyond end of device [ 140.428411][T17284] loop2: rw=2049, sector=2, nr_sectors = 2 limit=0 [ 140.455234][T17284] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 140.477583][T17284] EXT4-fs (loop2): I/O error while writing superblock [ 140.501398][ T29] audit: type=1400 audit(1726398477.994:6375): avc: denied { execmem } for pid=17293 comm="syz.3.3784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 140.542839][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.574270][ T3262] syz-executor: attempt to access beyond end of device [ 140.574270][ T3262] loop2: rw=2049, sector=2, nr_sectors = 2 limit=0 [ 140.587609][ T3262] Buffer I/O error on dev loop2, logical block 1, lost sync page write [ 140.620284][T17322] netlink: 'syz.1.3787': attribute type 10 has an invalid length. [ 140.628210][T17322] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3787'. [ 140.633617][ T3262] EXT4-fs (loop2): I/O error while writing superblock [ 140.648686][T17322] bridge0: port 3(ipvlan0) entered blocking state [ 140.655235][T17322] bridge0: port 3(ipvlan0) entered disabled state [ 140.670541][T17322] ipvlan0: entered allmulticast mode [ 140.675943][T17322] veth0_vlan: entered allmulticast mode [ 140.683051][ T29] audit: type=1400 audit(1726398478.174:6376): avc: denied { unmount } for pid=3262 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 140.705738][T17322] ipvlan0: left allmulticast mode [ 140.710803][T17322] veth0_vlan: left allmulticast mode [ 140.732039][T17332] loop2: detected capacity change from 0 to 512 [ 140.733109][T17322] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 140.778315][T17332] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.795206][T17332] ext4 filesystem being mounted at /757/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.795576][T17340] loop4: detected capacity change from 0 to 1024 [ 140.812273][T17340] EXT4-fs: Ignoring removed oldalloc option [ 140.819842][T17340] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 140.854044][T17332] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 140.872446][T17340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.877060][T17332] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 140.896743][T17332] EXT4-fs (loop2): This should not happen!! Data will be lost [ 140.896743][T17332] [ 140.906422][T17332] EXT4-fs (loop2): Total free blocks count 0 [ 140.912453][T17332] EXT4-fs (loop2): Free/Dirty block details [ 140.918392][T17332] EXT4-fs (loop2): free_blocks=65280 [ 140.923670][T17332] EXT4-fs (loop2): dirty_blocks=2 [ 140.928772][T17332] EXT4-fs (loop2): Block reservation details [ 140.934826][T17332] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 140.969010][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.004170][T15264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.096335][T17401] netem: incorrect gi model size [ 141.101397][T17401] netem: change failed [ 141.166827][T17385] loop4: detected capacity change from 0 to 8192 [ 141.275866][T17422] netlink: 'syz.1.3826': attribute type 2 has an invalid length. [ 141.299388][T17425] loop3: detected capacity change from 0 to 512 [ 141.320960][T17425] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.343028][T17425] ext4 filesystem being mounted at /775/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.379853][T17425] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 141.408807][T17425] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 2 with error 28 [ 141.421138][T17425] EXT4-fs (loop3): This should not happen!! Data will be lost [ 141.421138][T17425] [ 141.430774][T17425] EXT4-fs (loop3): Total free blocks count 0 [ 141.436807][T17425] EXT4-fs (loop3): Free/Dirty block details [ 141.442685][T17425] EXT4-fs (loop3): free_blocks=65280 [ 141.448024][T17425] EXT4-fs (loop3): dirty_blocks=2 [ 141.453056][T17425] EXT4-fs (loop3): Block reservation details [ 141.459037][T17425] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 141.469844][T17439] loop1: detected capacity change from 0 to 512 [ 141.505698][T17439] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.526899][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.539782][T17439] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.619520][T17434] EXT4-fs error (device loop1): ext4_readdir:260: inode #2: block 3: comm syz.1.3820: path /46/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 141.646599][T17434] EXT4-fs (loop1): Remounting filesystem read-only [ 141.856015][T17475] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 141.908426][T17481] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3836'. [ 142.200713][T17517] bridge0: port 3(team0) entered disabled state [ 142.207103][T17517] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.214251][T17517] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.221548][T17517] bridge0: entered allmulticast mode [ 142.247333][T17517] bridge0: port 3(team0) entered blocking state [ 142.253642][T17517] bridge0: port 3(team0) entered forwarding state [ 142.260149][T17517] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.267293][T17517] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.274606][T17517] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.281669][T17517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.290548][T17517] bridge0: entered promiscuous mode [ 142.341857][T16139] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.344910][T17571] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 143.551885][T17590] loop3: detected capacity change from 0 to 8192 [ 143.562289][T17594] loop4: detected capacity change from 0 to 512 [ 143.609651][T17594] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.645151][T17594] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.685116][T17560] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz.4.3863: path /87/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0 [ 143.739696][T17560] EXT4-fs (loop4): Remounting filesystem read-only [ 144.025175][T17641] loop2: detected capacity change from 0 to 128 [ 144.046653][T17641] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.066383][T17641] ext4 filesystem being mounted at /780/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.087164][T17642] usb usb8: usbfs: process 17642 (syz.1.3899) did not claim interface 0 before use [ 144.191986][ T3262] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.223894][T17670] syz.1.3904[17670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.223989][T17670] syz.1.3904[17670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.356907][T17689] IPVS: Error joining to the multicast group [ 144.374842][T15264] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.466145][T17709] IPv6: NLM_F_CREATE should be specified when creating new route [ 144.515539][T17716] loop4: detected capacity change from 0 to 128 [ 144.523326][T17716] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.536836][T17716] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 144.591891][T17726] loop3: detected capacity change from 0 to 1024 [ 144.600603][T15264] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.607452][T17730] loop2: detected capacity change from 0 to 132 [ 144.619561][T17726] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.632612][T17739] tipc: Started in network mode [ 144.637603][T17739] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 144.652950][T17739] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:e000:0002 [ 144.661013][T17739] tipc: Enabled bearer , priority 10 [ 144.675166][ T3258] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.724161][T17757] bridge_slave_0: default FDB implementation only supports local addresses [ 144.729229][T17755] loop4: detected capacity change from 0 to 2048 [ 144.757362][T17761] SELinux: policydb version 805207657 does not match my version range 15-33 [ 144.766721][T17761] SELinux: failed to load policy [ 144.776732][T17755] loop4: p1 < > p4 [ 144.785398][T17755] loop4: p4 size 8388608 extends beyond EOD, truncated [ 144.835996][T17780] block device autoloading is deprecated and will be removed. [ 144.843610][T17774] netlink: 'syz.1.3946': attribute type 4 has an invalid length. [ 144.876600][T17774] netlink: 'syz.1.3946': attribute type 4 has an invalid length. [ 144.928946][T17793] x_tables: ip_tables: osf match: only valid for protocol 6 [ 144.939451][T17795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3953'. [ 144.948455][T17795] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3953'. [ 145.047282][T17797] syzkaller0: entered promiscuous mode [ 145.052802][T17797] syzkaller0: entered allmulticast mode [ 145.190137][ T29] kauditd_printk_skb: 109 callbacks suppressed [ 145.190210][ T29] audit: type=1400 audit(1726398482.684:6486): avc: denied { read } for pid=17839 comm="syz.0.3970" name="sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.245081][ T29] audit: type=1400 audit(1726398482.714:6487): avc: denied { open } for pid=17839 comm="syz.0.3970" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.269160][ T29] audit: type=1400 audit(1726398482.714:6488): avc: denied { ioctl } for pid=17839 comm="syz.0.3970" path="/dev/sg0" dev="devtmpfs" ino=113 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 145.294739][ T29] audit: type=1326 audit(1726398482.724:6489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17820 comm="syz.4.3960" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x0 [ 145.317766][ T29] audit: type=1326 audit(1726398482.734:6490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 145.341371][ T29] audit: type=1326 audit(1726398482.734:6491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 145.364966][ T29] audit: type=1326 audit(1726398482.734:6492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 145.388567][ T29] audit: type=1326 audit(1726398482.734:6493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17848 comm="syz.0.3962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6e6adef9 code=0x7ffc0000 [ 145.413382][ T29] audit: type=1326 audit(1726398482.914:6494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17869 comm="syz.1.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ed34def9 code=0x7ffc0000 [ 145.426764][T17872] loop0: detected capacity change from 0 to 1024 [ 145.443931][ T29] audit: type=1326 audit(1726398482.934:6495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17869 comm="syz.1.3963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7ff9ed34def9 code=0x7ffc0000 [ 145.469607][T17872] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 145.497917][T12940] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.537212][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.544617][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.552030][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.559926][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.567383][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.574821][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.582266][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.589707][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.597743][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.605538][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.612996][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.620375][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.627756][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.635124][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.642520][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.649970][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.657368][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.664718][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.672097][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.679489][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.689791][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.697284][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.704694][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.712103][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.719514][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.726927][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.734337][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.741750][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.749219][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.756623][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.764052][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.771453][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.775092][ T35] tipc: Node number set to 1 [ 145.778871][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.790910][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.798350][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.805739][ T8] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 145.814976][ T8] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz0] on syz0 [ 145.904634][T17909] loop3: detected capacity change from 0 to 2048 [ 146.070581][T17963] netlink: 'syz.0.3998': attribute type 4 has an invalid length. [ 146.084840][T17957] loop2: detected capacity change from 0 to 1024 [ 146.130727][T17957] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.135717][T17977] x_tables: ip_tables: osf match: only valid for protocol 6 [ 146.164966][T17963] netlink: 'syz.0.3998': attribute type 4 has an invalid length. [ 146.184142][ T3262] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.239520][T17998] loop3: detected capacity change from 0 to 512 [ 146.288008][T17998] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.311932][T17998] ext4 filesystem being mounted at /809/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.337061][T17998] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4007: corrupted inode contents [ 146.355181][T17998] EXT4-fs error (device loop3): ext4_dirty_inode:6014: inode #2: comm syz.3.4007: mark_inode_dirty error [ 146.381488][T17998] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4007: corrupted inode contents [ 146.404839][T18029] EXT4-fs error (device loop3): ext4_add_entry:2435: inode #2: comm syz.3.4007: Directory hole found for htree leaf block 0 [ 146.784558][T18107] syz.0.4034[18107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.784668][T18107] syz.0.4034[18107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 146.814667][T18107] loop0: detected capacity change from 0 to 2048 [ 146.906398][T18119] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.076405][T18148] IPVS: Error joining to the multicast group [ 147.117950][T18152] tipc: Started in network mode [ 147.123039][T18152] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 147.125402][T18156] loop0: detected capacity change from 0 to 2048 [ 147.132643][T18152] tipc: New replicast peer: 0000:0000:0000:0000:0000:ffff:e000:0002 [ 147.146348][T18152] tipc: Enabled bearer , priority 10 [ 147.165570][T18156] loop0: p1 < > p4 [ 147.170151][T18156] loop0: p4 size 8388608 extends beyond EOD, truncated [ 147.185802][T18158] loop2: detected capacity change from 0 to 512 [ 147.209234][T18158] ext4 filesystem being mounted at /806/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.223889][T18175] x_tables: ip_tables: osf match: only valid for protocol 6 [ 147.228114][T18158] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4058: corrupted inode contents [ 147.244845][T18158] EXT4-fs error (device loop2): ext4_dirty_inode:6014: inode #2: comm syz.2.4058: mark_inode_dirty error [ 147.258573][T18158] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4058: corrupted inode contents [ 147.283464][T18158] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.4058: Directory hole found for htree leaf block 0 [ 147.316662][T18181] loop0: detected capacity change from 0 to 1024 [ 147.669767][T18220] loop4: detected capacity change from 0 to 512 [ 147.698817][T18220] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.743064][T18220] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4077: corrupted inode contents [ 147.766951][T18220] EXT4-fs error (device loop4): ext4_dirty_inode:6014: inode #2: comm syz.4.4077: mark_inode_dirty error [ 147.791261][T18220] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4077: corrupted inode contents [ 147.829678][T18232] EXT4-fs error (device loop4): ext4_add_entry:2435: inode #2: comm syz.4.4077: Directory hole found for htree leaf block 0 [ 147.860991][T18230] loop3: detected capacity change from 0 to 8192 [ 147.902580][T18235] loop0: detected capacity change from 0 to 8192 [ 148.167271][ T3338] tipc: Node number set to 1 [ 148.261062][T18271] loop3: detected capacity change from 0 to 8192 [ 148.439805][T18294] loop3: detected capacity change from 0 to 1024 [ 148.523084][T18309] syz.4.4112[18309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.523184][T18309] syz.4.4112[18309] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 148.571653][T18313] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 148.638192][T18321] program syz.1.4117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.691262][T18327] loop1: detected capacity change from 0 to 1764 [ 148.722932][T18333] loop1: detected capacity change from 0 to 1024 [ 148.849374][T18358] program syz.3.4134 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.852801][T18359] loop1: detected capacity change from 0 to 1024 [ 148.866820][T18359] EXT4-fs: Ignoring removed orlov option [ 148.872491][T18359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.067995][T18399] Dead loop on virtual device ipvlan1, fix it urgently! [ 149.098707][T18399] syz.0.4143 (18399) used greatest stack depth: 2376 bytes left [ 149.156601][T18432] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4150'. [ 149.191422][T18371] chnl_net:caif_netlink_parms(): no params data found [ 149.221909][T18515] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.010725][T18371] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.017854][T18371] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.037666][T18371] bridge_slave_0: entered allmulticast mode [ 151.044274][T18371] bridge_slave_0: entered promiscuous mode [ 151.053263][T18371] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.060489][T18371] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.079280][T18371] bridge_slave_1: entered allmulticast mode [ 151.085956][T18371] bridge_slave_1: entered promiscuous mode [ 151.109152][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 151.109165][ T29] audit: type=1326 audit(1726398488.604:6692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.139231][ T29] audit: type=1326 audit(1726398488.604:6693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.162749][ T29] audit: type=1326 audit(1726398488.604:6694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.186220][ T29] audit: type=1326 audit(1726398488.604:6695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.209817][ T29] audit: type=1326 audit(1726398488.604:6696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.233489][ T29] audit: type=1326 audit(1726398488.604:6697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.256954][ T29] audit: type=1326 audit(1726398488.604:6698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.280661][ T29] audit: type=1326 audit(1726398488.604:6699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.306154][ T29] audit: type=1400 audit(1726398488.744:6700): avc: denied { bind } for pid=18608 comm="syz.3.4165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 151.325884][ T29] audit: type=1326 audit(1726398488.754:6701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18595 comm="syz.4.4163" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c60b8def9 code=0x7ffc0000 [ 151.359824][T18371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.390326][T18371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.419939][ T2] ================================================================== [ 151.428017][ T2] BUG: KCSAN: data-race in alloc_pid / copy_process [ 151.434590][ T2] [ 151.436894][ T2] read-write to 0xffffffff8665d8f8 of 4 bytes by task 50 on cpu 1: [ 151.444763][ T2] alloc_pid+0x542/0x6f0 [ 151.448986][ T2] copy_process+0xff8/0x1f90 [ 151.453557][ T2] kernel_clone+0x167/0x5e0 [ 151.458045][ T2] user_mode_thread+0x7d/0xb0 [ 151.462706][ T2] call_usermodehelper_exec_work+0x41/0x150 [ 151.468587][ T2] process_scheduled_works+0x483/0x9a0 [ 151.474035][ T2] worker_thread+0x51d/0x6f0 [ 151.478700][ T2] kthread+0x1d1/0x210 [ 151.482750][ T2] ret_from_fork+0x4b/0x60 [ 151.487152][ T2] ret_from_fork_asm+0x1a/0x30 [ 151.491899][ T2] [ 151.494203][ T2] read to 0xffffffff8665d8f8 of 4 bytes by task 2 on cpu 0: [ 151.501462][ T2] copy_process+0x15e3/0x1f90 [ 151.506123][ T2] kernel_clone+0x167/0x5e0 [ 151.510608][ T2] kernel_thread+0xb4/0xf0 [ 151.515007][ T2] kthreadd+0x28b/0x330 [ 151.519139][ T2] ret_from_fork+0x4b/0x60 [ 151.523547][ T2] ret_from_fork_asm+0x1a/0x30 [ 151.528295][ T2] [ 151.530605][ T2] value changed: 0x800000d1 -> 0x800000d2 [ 151.536297][ T2] [ 151.538596][ T2] Reported by Kernel Concurrency Sanitizer on: [ 151.544729][ T2] CPU: 0 UID: 0 PID: 2 Comm: kthreadd Not tainted 6.11.0-rc7-syzkaller-00151-gd42f7708e27c #0 [ 151.554949][ T2] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 151.564984][ T2] ================================================================== [ 151.591824][T18371] team0: Port device team_slave_0 added [ 151.599396][T18371] team0: Port device team_slave_1 added [ 151.775835][ T1650] bridge_slave_1: left allmulticast mode [ 151.781469][ T1650] bridge_slave_1: left promiscuous mode [ 151.787206][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.794685][ T1650] bridge_slave_0: left allmulticast mode [ 151.800366][ T1650] bridge_slave_0: left promiscuous mode [ 151.806010][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.867205][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.878925][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.889111][ T1650] bond0 (unregistering): Released all slaves [ 152.030775][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 152.040856][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 152.310337][ T1650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.359273][ T1650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.398137][ T1650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.457755][ T1650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.518474][ T1650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.568280][ T1650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.618704][ T1650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.677576][ T1650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.758623][ T1650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.797807][ T1650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.847313][ T1650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.918435][ T1650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.989424][ T1650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.047716][ T1650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.087706][ T1650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.147701][ T1650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.257284][ T1650] bridge_slave_1: left allmulticast mode [ 153.263142][ T1650] bridge_slave_1: left promiscuous mode [ 153.268842][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.276850][ T1650] bridge_slave_0: left allmulticast mode [ 153.282476][ T1650] bridge_slave_0: left promiscuous mode [ 153.288095][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.296173][ T1650] bridge_slave_1: left allmulticast mode [ 153.301905][ T1650] bridge_slave_1: left promiscuous mode [ 153.307515][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.315179][ T1650] bridge_slave_0: left allmulticast mode [ 153.320797][ T1650] bridge_slave_0: left promiscuous mode [ 153.326488][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.334451][ T1650] bridge_slave_1: left allmulticast mode [ 153.340164][ T1650] bridge_slave_1: left promiscuous mode [ 153.345824][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.353772][ T1650] bridge_slave_0: left allmulticast mode [ 153.359490][ T1650] bridge_slave_0: left promiscuous mode [ 153.365146][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.373161][ T1650] bridge_slave_1: left allmulticast mode [ 153.378897][ T1650] bridge_slave_1: left promiscuous mode [ 153.384483][ T1650] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.392182][ T1650] bridge_slave_0: left allmulticast mode [ 153.397822][ T1650] bridge_slave_0: left promiscuous mode [ 153.403384][ T1650] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.807583][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.818694][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.828537][ T1650] bond0 (unregistering): Released all slaves [ 153.837443][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.847670][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.857819][ T1650] bond0 (unregistering): Released all slaves [ 153.866842][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.877391][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.887311][ T1650] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 153.897097][ T1650] bond0 (unregistering): Released all slaves [ 153.905870][ T1650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.916253][ T1650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.926465][ T1650] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 153.936038][ T1650] bond0 (unregistering): Released all slaves [ 154.008296][ T1650] tipc: Disabling bearer [ 154.013508][ T1650] tipc: Left network mode [ 154.018146][ T1650] tipc: Disabling bearer [ 154.023344][ T1650] tipc: Left network mode [ 154.086656][ T1650] IPVS: stopping backup sync thread 11886 ... [ 154.190947][ T1650] hsr_slave_0: left promiscuous mode [ 154.196602][ T1650] hsr_slave_1: left promiscuous mode [ 154.202283][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.210789][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.218461][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.225849][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.234872][ T1650] hsr_slave_0: left promiscuous mode [ 154.241490][ T1650] hsr_slave_1: left promiscuous mode [ 154.247252][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.254655][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.262151][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.269605][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.278365][ T1650] hsr_slave_0: left promiscuous mode [ 154.283934][ T1650] hsr_slave_1: left promiscuous mode [ 154.289672][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.297077][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.304528][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.311939][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.320907][ T1650] hsr_slave_0: left promiscuous mode [ 154.326551][ T1650] hsr_slave_1: left promiscuous mode [ 154.332071][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 154.339461][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 154.347045][ T1650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 154.354442][ T1650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.367111][ T1650] veth1_macvtap: left promiscuous mode [ 154.372573][ T1650] veth0_macvtap: left promiscuous mode [ 154.378132][ T1650] veth1_vlan: left promiscuous mode [ 154.383320][ T1650] veth0_vlan: left promiscuous mode [ 154.388942][ T1650] veth1_macvtap: left promiscuous mode [ 154.394443][ T1650] veth0_macvtap: left promiscuous mode [ 154.399978][ T1650] veth1_vlan: left promiscuous mode [ 154.405233][ T1650] veth0_vlan: left promiscuous mode [ 154.411021][ T1650] veth1_macvtap: left promiscuous mode [ 154.416518][ T1650] veth0_macvtap: left promiscuous mode [ 154.421984][ T1650] veth1_vlan: left promiscuous mode [ 154.427258][ T1650] veth0_vlan: left promiscuous mode [ 154.433078][ T1650] veth1_macvtap: left promiscuous mode [ 154.438556][ T1650] veth0_macvtap: left promiscuous mode [ 154.444019][ T1650] veth1_vlan: left promiscuous mode [ 154.449291][ T1650] veth0_vlan: left promiscuous mode [ 154.598173][ T1650] infiniband syz1: set down [ 154.643510][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 154.653442][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 154.711792][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 154.722133][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 154.779058][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 154.789730][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 154.846906][ T1650] team0 (unregistering): Port device team_slave_1 removed [ 154.857621][ T1650] team0 (unregistering): Port device team_slave_0 removed [ 154.865294][ T58] smc: removing ib device syz1 [ 155.709209][ T1650] IPVS: stop unused estimator thread 0... [ 155.715300][ T1650] IPVS: stop unused estimator thread 0... [ 157.121396][ T50] bridge_slave_1: left allmulticast mode [ 157.127073][ T50] bridge_slave_1: left promiscuous mode [ 157.132709][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.140233][ T50] bridge_slave_0: left allmulticast mode [ 157.146156][ T50] bridge_slave_0: left promiscuous mode [ 157.151836][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.277325][ T50] @ (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.287123][ T50] @ (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.296408][ T50] @ (unregistering): Released all slaves [ 157.398557][ T50] hsr_slave_0: left promiscuous mode [ 157.404294][ T50] hsr_slave_1: left promiscuous mode [ 157.409979][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.417399][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.424803][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.432181][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.440737][ T50] veth1_macvtap: left promiscuous mode [ 157.446225][ T50] veth0_macvtap: left promiscuous mode [ 157.451694][ T50] veth1_vlan: left promiscuous mode [ 157.456992][ T50] veth0_vlan: left promiscuous mode [ 157.524351][ T50] team0 (unregistering): Port device team_slave_1 removed [ 157.534149][ T50] team0 (unregistering): Port device team_slave_0 removed