last executing test programs: 4.16421241s ago: executing program 4 (id=524): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000840)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300"], 0x0, 0x2000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0a00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000000000000000008f8ab223f3c92798e90000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000b40)=""/67}, {&(0x7f0000000400)=""/8}, {&(0x7f0000000680)=""/188}, {&(0x7f0000000bc0)=""/241}, {&(0x7f0000000940)=""/221}], 0x0, &(0x7f0000000a40)=""/192}, 0x8}], 0x3fffffffffffedd, 0x10002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x7}, 0x18) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x301, 0x0, 0xe0, 0x101, 0x0}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f0000000380)) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x39}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20) 2.719862473s ago: executing program 1 (id=539): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) 2.719318313s ago: executing program 1 (id=541): socket$netlink(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000008001d00000000001400", @ANYRES64=r0], 0x38}}, 0x0) 2.520075571s ago: executing program 1 (id=543): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000002140)={[0xfffffffffffffff5]}, 0x8, 0x0) readv(r0, &(0x7f0000002940)=[{0x0}, {0x0}], 0x2) 2.393586087s ago: executing program 1 (id=546): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286", 0x15) 2.393107527s ago: executing program 1 (id=547): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2], 0x44}}, 0x0) 2.363089168s ago: executing program 1 (id=548): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=r0], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r2}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) socket(0x28, 0x5, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1.884246318s ago: executing program 3 (id=555): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x4, 0x45, 0x1488, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$l2tp6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x0, 0x0, @private2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000500000000020000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x10, 0x3, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000340)=ANY=[@ANYRES16=r0], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x648}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000000)={[{@bsdgroups}, {@grpjquota}]}, 0xc1, 0x7e9, &(0x7f00000017c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) 1.370966821s ago: executing program 2 (id=557): pipe(&(0x7f0000000280)={0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, 0x0, 0x8) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r1, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 1.351488881s ago: executing program 2 (id=558): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) 1.327200223s ago: executing program 2 (id=559): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2], 0x44}}, 0x0) 1.298647434s ago: executing program 2 (id=560): syz_read_part_table(0x60d, &(0x7f0000002200)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x4842, 0x1cb) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000070080000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8264, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x367b, 0x8000}, 0x10320, 0x0, 0x8, 0x0, 0x1, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYRESOCT=r1], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xa4, 0x1589, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x803, 0x0, @perf_config_ext, 0x0, 0x5b, 0x0, 0x4, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x833e) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0x0, 0x1}}}, 0x24}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000540)={'syztnl0\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x7800, 0x8, 0xc, 0x8, {{0x20, 0x4, 0x0, 0x9, 0x80, 0x65, 0x0, 0x6, 0x29, 0x0, @loopback, @remote, {[@noop, @rr={0x7, 0x7, 0xd8, [@local]}, @generic={0x88, 0xc, "73bb87bc42f0ab9d9151"}, @rr={0x7, 0x3, 0x58}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0xb, 0x3, 0x8, [{@local, 0x401}]}, @timestamp_prespec={0x44, 0x44, 0x3a, 0x3, 0x1, [{@broadcast, 0x53cc}, {@multicast1, 0x8}, {@private=0xa010100, 0xf3c6}, {@multicast2, 0x400}, {@broadcast, 0x3714}, {@loopback, 0x3083}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@remote, 0xd78a}]}, @end]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f00000007c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="b0010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf25090000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002006d61637674617030000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000040000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="50000180", @ANYRES32=0x0, @ANYBLOB="1400020070696d36726567000000000000000000140002007465616d3000000000000000000000001400020070696d7265673100000000000000000008000100", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f626f6e64000000140002007465616d3000000000000000000000000800030000000000140002006261746165765f736c6176655f310000140002006261746164763000000000000000000008000300020000001400020076657468305f746f5f7465616d0000005000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1400020068737230000000000000000000000000080003000000000008000300000000", @ANYBLOB="080003000300"], 0x1b0}, 0x1, 0x0, 0x0, 0x200440c4}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f00000003c0)=ANY=[]) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 1.275180065s ago: executing program 3 (id=561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.066681834s ago: executing program 0 (id=562): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{0x0}], 0x1}}, {}], 0x3, 0x1c000) shutdown(r0, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0x5}], 0x1, 0x0, 0x0, 0x0) 973.082978ms ago: executing program 0 (id=563): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r2, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001000000100000001700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r4, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000000400000002000000000000000102", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004ca756650c2047739271c8541646ea4fa53aaea345e0d3391b12452063b7a235125a9696cf3ad5e51b453b493bdd0a6c2e3504af91aed8eb06d662613d394d928968fd07db6e812f811d468d16e52b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 893.729731ms ago: executing program 4 (id=564): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = getegid() sendmmsg$unix(r1, &(0x7f0000000f80)=[{{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB="18000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="18000000000000", @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="000000001c00000000000000010000", @ANYRES32=r2, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00955839b000000001000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB], 0x128, 0x40}}], 0x1, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) request_key(0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 735.224178ms ago: executing program 4 (id=565): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 668.225471ms ago: executing program 4 (id=566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x20, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) 667.739781ms ago: executing program 0 (id=567): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400000010050000"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x9}}, 0xf) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r1, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 635.114553ms ago: executing program 0 (id=568): socket$inet_sctp(0x2, 0x1, 0x84) unshare(0x22020600) ppoll(&(0x7f0000000200), 0x0, &(0x7f0000000b00), 0x0, 0x0) 634.825232ms ago: executing program 4 (id=569): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000001, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5ce", 0x17) 612.462673ms ago: executing program 0 (id=570): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2], 0x44}}, 0x0) 611.841794ms ago: executing program 2 (id=571): gettid() fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) 607.241454ms ago: executing program 4 (id=572): r0 = socket$inet_sctp(0x2, 0x1, 0x84) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x0) 581.212224ms ago: executing program 0 (id=573): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000000)={0x4}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000180)=0x2f9, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x809}, &(0x7f0000000080)=0x90) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 532.239807ms ago: executing program 2 (id=574): socket$inet(0x2, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) dup(r3) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000002600000008000000"], 0x48) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 86.815536ms ago: executing program 3 (id=575): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x40000000000004, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000005c0)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f00000000c0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x10, 0x0, @in={0x2, 0x4e23, @empty}}}, 0x90) 70.594767ms ago: executing program 3 (id=576): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) 293.53µs ago: executing program 3 (id=577): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0xf721, 0x16, 0x0, 0x0) 0s ago: executing program 3 (id=578): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x98) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r2, 0x3, 0x6, @remote}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x1ffffff, {0x0, 0x0, 0x0, r2, {0x7, 0x9}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000001000000100000001700"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x11, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write(r1, &(0x7f0000000a00)="c7885a8f24f458bed7211672288cfc5eb321cf4074dc13", 0x17) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(r4, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1d0000000400000002000000000000000102", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000004ca756650c2047739271c8541646ea4fa53aaea345e0d3391b12452063b7a235125a9696cf3ad5e51b453b493bdd0a6c2e3504af91aed8eb06d662613d394d928968fd07db6e812f811d468d16e52b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000500"/28], 0x50) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.14' (ED25519) to the list of known hosts. [ 29.726121][ T29] audit: type=1400 audit(1764637440.576:62): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.749256][ T29] audit: type=1400 audit(1764637440.606:63): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.750223][ T3304] cgroup: Unknown subsys name 'net' [ 29.777106][ T29] audit: type=1400 audit(1764637440.636:64): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.917431][ T3304] cgroup: Unknown subsys name 'cpuset' [ 29.923847][ T3304] cgroup: Unknown subsys name 'rlimit' [ 30.094508][ T29] audit: type=1400 audit(1764637440.946:65): avc: denied { setattr } for pid=3304 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.118978][ T29] audit: type=1400 audit(1764637440.946:66): avc: denied { create } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.139560][ T29] audit: type=1400 audit(1764637440.946:67): avc: denied { write } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.147690][ T3306] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.159947][ T29] audit: type=1400 audit(1764637440.946:68): avc: denied { read } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.188852][ T29] audit: type=1400 audit(1764637440.956:69): avc: denied { mounton } for pid=3304 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.198772][ T3304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.213692][ T29] audit: type=1400 audit(1764637440.956:70): avc: denied { mount } for pid=3304 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.245712][ T29] audit: type=1400 audit(1764637441.026:71): avc: denied { relabelto } for pid=3306 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.331710][ T3313] chnl_net:caif_netlink_parms(): no params data found [ 31.423716][ T3315] chnl_net:caif_netlink_parms(): no params data found [ 31.469919][ T3313] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.477133][ T3313] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.484278][ T3313] bridge_slave_0: entered allmulticast mode [ 31.490868][ T3313] bridge_slave_0: entered promiscuous mode [ 31.498255][ T3313] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.505429][ T3313] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.512646][ T3313] bridge_slave_1: entered allmulticast mode [ 31.519093][ T3313] bridge_slave_1: entered promiscuous mode [ 31.525234][ T3318] chnl_net:caif_netlink_parms(): no params data found [ 31.553996][ T3323] chnl_net:caif_netlink_parms(): no params data found [ 31.595417][ T3313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.615177][ T3315] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.622337][ T3315] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.629612][ T3315] bridge_slave_0: entered allmulticast mode [ 31.635923][ T3315] bridge_slave_0: entered promiscuous mode [ 31.643315][ T3313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.652460][ T3315] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.659553][ T3315] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.666901][ T3315] bridge_slave_1: entered allmulticast mode [ 31.673191][ T3315] bridge_slave_1: entered promiscuous mode [ 31.719976][ T3313] team0: Port device team_slave_0 added [ 31.732634][ T3318] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.739723][ T3318] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.746972][ T3318] bridge_slave_0: entered allmulticast mode [ 31.753507][ T3318] bridge_slave_0: entered promiscuous mode [ 31.762239][ T3313] team0: Port device team_slave_1 added [ 31.768118][ T3320] chnl_net:caif_netlink_parms(): no params data found [ 31.778050][ T3315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.789635][ T3318] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.796726][ T3318] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.803986][ T3318] bridge_slave_1: entered allmulticast mode [ 31.810350][ T3318] bridge_slave_1: entered promiscuous mode [ 31.825044][ T3315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 31.872604][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 31.879606][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 31.905599][ T3313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 31.924853][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.932061][ T3323] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.939381][ T3323] bridge_slave_0: entered allmulticast mode [ 31.945720][ T3323] bridge_slave_0: entered promiscuous mode [ 31.953566][ T3318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 31.962841][ T3323] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.969918][ T3323] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.977249][ T3323] bridge_slave_1: entered allmulticast mode [ 31.983635][ T3323] bridge_slave_1: entered promiscuous mode [ 31.990282][ T3313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 31.997267][ T3313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.023188][ T3313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.036854][ T3315] team0: Port device team_slave_0 added [ 32.043668][ T3318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.053623][ T3315] team0: Port device team_slave_1 added [ 32.086441][ T3323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.120094][ T3323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.129306][ T3320] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.136420][ T3320] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.143705][ T3320] bridge_slave_0: entered allmulticast mode [ 32.150407][ T3320] bridge_slave_0: entered promiscuous mode [ 32.157213][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.164240][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.190263][ T3315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.201655][ T3318] team0: Port device team_slave_0 added [ 32.217509][ T3320] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.224654][ T3320] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.231927][ T3320] bridge_slave_1: entered allmulticast mode [ 32.238341][ T3320] bridge_slave_1: entered promiscuous mode [ 32.244656][ T3315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.251642][ T3315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.277626][ T3315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.289261][ T3318] team0: Port device team_slave_1 added [ 32.297398][ T3313] hsr_slave_0: entered promiscuous mode [ 32.303446][ T3313] hsr_slave_1: entered promiscuous mode [ 32.338003][ T3323] team0: Port device team_slave_0 added [ 32.345143][ T3323] team0: Port device team_slave_1 added [ 32.352180][ T3320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 32.373825][ T3320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 32.383257][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.390240][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.416308][ T3318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.459112][ T3318] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.466087][ T3318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.492056][ T3318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.507413][ T3315] hsr_slave_0: entered promiscuous mode [ 32.513442][ T3315] hsr_slave_1: entered promiscuous mode [ 32.519483][ T3315] debugfs: 'hsr0' already exists in 'hsr' [ 32.525215][ T3315] Cannot create hsr debugfs directory [ 32.530949][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.537961][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.563937][ T3323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.575694][ T3320] team0: Port device team_slave_0 added [ 32.597815][ T3323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.604794][ T3323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.630735][ T3323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.642182][ T3320] team0: Port device team_slave_1 added [ 32.697977][ T3318] hsr_slave_0: entered promiscuous mode [ 32.703918][ T3318] hsr_slave_1: entered promiscuous mode [ 32.709862][ T3318] debugfs: 'hsr0' already exists in 'hsr' [ 32.715587][ T3318] Cannot create hsr debugfs directory [ 32.728500][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 32.736054][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.762068][ T3320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 32.775724][ T3320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 32.782727][ T3320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 32.808699][ T3320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 32.832395][ T3323] hsr_slave_0: entered promiscuous mode [ 32.838622][ T3323] hsr_slave_1: entered promiscuous mode [ 32.844483][ T3323] debugfs: 'hsr0' already exists in 'hsr' [ 32.850237][ T3323] Cannot create hsr debugfs directory [ 32.900181][ T3320] hsr_slave_0: entered promiscuous mode [ 32.906352][ T3320] hsr_slave_1: entered promiscuous mode [ 32.912298][ T3320] debugfs: 'hsr0' already exists in 'hsr' [ 32.918044][ T3320] Cannot create hsr debugfs directory [ 33.044873][ T3313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 33.053718][ T3313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 33.064019][ T3313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 33.072731][ T3313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 33.096130][ T3315] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 33.106297][ T3315] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 33.126257][ T3315] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 33.138470][ T3315] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 33.152921][ T3318] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 33.162028][ T3318] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 33.178603][ T3318] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 33.193572][ T3318] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 33.217722][ T3320] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 33.234915][ T3313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.246048][ T3320] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 33.254902][ T3320] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 33.268619][ T3320] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 33.292920][ T3313] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.310650][ T3323] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 33.321979][ T3323] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 33.332642][ T1084] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.339743][ T1084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.354760][ T3323] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 33.364218][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.371295][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.387998][ T3323] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 33.401538][ T3315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.426538][ T3315] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.445734][ T3313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.458153][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.465317][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.480441][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.487532][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.519250][ T3318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.530870][ T3315] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.541374][ T3315] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.564492][ T3318] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.586415][ T3320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.602770][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.609944][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.620911][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.627996][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.640157][ T3320] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.669908][ T3313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.686344][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.693500][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.702275][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.709457][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.735593][ T3315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.769314][ T3323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 33.821545][ T3318] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.834895][ T3323] 8021q: adding VLAN 0 to HW filter on device team0 [ 33.873529][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.880641][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.904741][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.911866][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.930614][ T3323] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 33.941022][ T3323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 33.965972][ T3320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 33.989231][ T3313] veth0_vlan: entered promiscuous mode [ 33.995504][ T3315] veth0_vlan: entered promiscuous mode [ 34.016477][ T3313] veth1_vlan: entered promiscuous mode [ 34.025365][ T3315] veth1_vlan: entered promiscuous mode [ 34.044162][ T3318] veth0_vlan: entered promiscuous mode [ 34.062233][ T3313] veth0_macvtap: entered promiscuous mode [ 34.071430][ T3315] veth0_macvtap: entered promiscuous mode [ 34.080313][ T3318] veth1_vlan: entered promiscuous mode [ 34.089869][ T3313] veth1_macvtap: entered promiscuous mode [ 34.103463][ T3315] veth1_macvtap: entered promiscuous mode [ 34.116590][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.139587][ T3313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.150208][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.170066][ T3318] veth0_macvtap: entered promiscuous mode [ 34.178740][ T52] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.188453][ T3320] veth0_vlan: entered promiscuous mode [ 34.197605][ T3323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 34.205511][ T3315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.215041][ T52] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.224885][ T3318] veth1_macvtap: entered promiscuous mode [ 34.238846][ T3320] veth1_vlan: entered promiscuous mode [ 34.252984][ T52] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.262066][ T52] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.287148][ T52] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.308146][ T55] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.328675][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.337956][ T3313] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 34.356460][ T3320] veth0_macvtap: entered promiscuous mode [ 34.372293][ T3318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.380084][ T55] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.390080][ T3320] veth1_macvtap: entered promiscuous mode [ 34.412208][ T55] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.425272][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 34.444453][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.455439][ T3320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 34.476842][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.485763][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.526774][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.535619][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.571601][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.587902][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 34.602481][ T3323] veth0_vlan: entered promiscuous mode [ 34.629141][ T3323] veth1_vlan: entered promiscuous mode [ 34.646218][ T3323] veth0_macvtap: entered promiscuous mode [ 34.653911][ T3323] veth1_macvtap: entered promiscuous mode [ 35.531633][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 35.531648][ T29] audit: type=1400 audit(1764637446.386:97): avc: denied { read write } for pid=3497 comm="syz.3.8" name="rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.561768][ T29] audit: type=1400 audit(1764637446.386:98): avc: denied { open } for pid=3497 comm="syz.3.8" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=252 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 35.594943][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.634916][ T29] audit: type=1400 audit(1764637446.486:99): avc: denied { map_create } for pid=3496 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.653991][ T29] audit: type=1400 audit(1764637446.486:100): avc: denied { map_read map_write } for pid=3496 comm="syz.2.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.694843][ T29] audit: type=1400 audit(1764637446.536:101): avc: denied { perfmon } for pid=3504 comm="syz.1.9" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.724616][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.733145][ T29] audit: type=1400 audit(1764637446.576:102): avc: denied { prog_load } for pid=3507 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.752108][ T29] audit: type=1400 audit(1764637446.576:103): avc: denied { bpf } for pid=3507 comm="syz.3.10" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 35.766416][ T3323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.772431][ T29] audit: type=1400 audit(1764637446.576:104): avc: denied { prog_run } for pid=3507 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 35.772460][ T29] audit: type=1400 audit(1764637446.576:105): avc: denied { read } for pid=3507 comm="syz.3.10" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.821457][ T29] audit: type=1400 audit(1764637446.576:106): avc: denied { open } for pid=3507 comm="syz.3.10" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.888622][ T1691] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.909264][ T3512] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13'. [ 35.945131][ T1691] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.967648][ T1691] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.986793][ T55] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.017516][ T3514] loop1: detected capacity change from 0 to 2048 [ 36.074968][ T3524] netlink: 'syz.2.17': attribute type 10 has an invalid length. [ 36.082874][ T3524] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17'. [ 36.102486][ T3514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 36.155984][ T3524] ipvlan2: entered promiscuous mode [ 36.162781][ T3524] bridge0: port 3(ipvlan2) entered blocking state [ 36.169350][ T3524] bridge0: port 3(ipvlan2) entered disabled state [ 36.176290][ T3524] ipvlan2: entered allmulticast mode [ 36.181651][ T3524] bridge0: entered allmulticast mode [ 36.194318][ T3524] ipvlan2: left allmulticast mode [ 36.199467][ T3524] bridge0: left allmulticast mode [ 36.282866][ T3514] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 36.577070][ T3514] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 842 with error 28 [ 36.589478][ T3514] EXT4-fs (loop1): This should not happen!! Data will be lost [ 36.589478][ T3514] [ 36.599141][ T3514] EXT4-fs (loop1): Total free blocks count 0 [ 36.605125][ T3514] EXT4-fs (loop1): Free/Dirty block details [ 36.611036][ T3514] EXT4-fs (loop1): free_blocks=2415919104 [ 36.616841][ T3514] EXT4-fs (loop1): dirty_blocks=848 [ 36.622053][ T3514] EXT4-fs (loop1): Block reservation details [ 36.628098][ T3514] EXT4-fs (loop1): i_reserved_data_blocks=53 [ 36.859815][ T3514] syz.1.14 (3514) used greatest stack depth: 10120 bytes left [ 36.933346][ T52] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 36.989002][ T3557] loop2: detected capacity change from 0 to 128 [ 36.997428][ T3555] loop3: detected capacity change from 0 to 2048 [ 37.029336][ T3557] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.037271][ T3557] FAT-fs (loop2): Filesystem has been set read-only [ 37.044085][ T3557] syz.2.26: attempt to access beyond end of device [ 37.044085][ T3557] loop2: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 37.047139][ T3303] loop3: p1 < > p4 [ 37.059176][ T3557] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.062880][ T3303] loop3: p4 size 8388608 extends beyond EOD, [ 37.069327][ T3557] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100) [ 37.069631][ T3557] syz.2.26: attempt to access beyond end of device [ 37.069631][ T3557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.075457][ T3303] truncated [ 37.102749][ T3557] syz.2.26: attempt to access beyond end of device [ 37.102749][ T3557] loop2: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 37.153556][ T3555] loop3: p1 < > p4 [ 37.170208][ T3555] loop3: p4 size 8388608 extends beyond EOD, truncated [ 37.229321][ T3570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.298467][ T3570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.443496][ T3580] loop1: detected capacity change from 0 to 2048 [ 37.492399][ T3580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 37.508170][ T3555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.25'. [ 37.577374][ T3587] loop0: detected capacity change from 0 to 256 [ 37.584090][ T3587] msdos: Unknown parameter 'ÿÿÿÿ' [ 37.750649][ T3580] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 37.862464][ T3580] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 850 with error 28 [ 37.874911][ T3580] EXT4-fs (loop1): This should not happen!! Data will be lost [ 37.874911][ T3580] [ 37.884687][ T3580] EXT4-fs (loop1): Total free blocks count 0 [ 37.890779][ T3580] EXT4-fs (loop1): Free/Dirty block details [ 37.896795][ T3580] EXT4-fs (loop1): free_blocks=2415919104 [ 37.902569][ T3580] EXT4-fs (loop1): dirty_blocks=928 [ 37.907821][ T3580] EXT4-fs (loop1): Block reservation details [ 37.913805][ T3580] EXT4-fs (loop1): i_reserved_data_blocks=58 [ 38.077450][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 38.091567][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 38.298210][ T3595] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 38.432564][ T3595] Zero length message leads to an empty skb [ 38.445848][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 38.545405][ T3604] loop1: detected capacity change from 0 to 128 [ 38.572147][ T3604] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 38.580101][ T3604] FAT-fs (loop1): Filesystem has been set read-only [ 38.819430][ T3604] syz.1.41: attempt to access beyond end of device [ 38.819430][ T3604] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 38.889864][ T3619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.46'. [ 38.920380][ T3604] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 38.928360][ T3604] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 38.960637][ T3621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 38.969547][ T3621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 39.172981][ T3604] syz.1.41: attempt to access beyond end of device [ 39.172981][ T3604] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.198341][ T3608] loop2: detected capacity change from 0 to 8192 [ 39.201860][ T3621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 39.205460][ T3604] syz.1.41: attempt to access beyond end of device [ 39.205460][ T3604] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.213687][ T3621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 39.257717][ T3303] loop2: p1 p2 p3 p4 [ 39.263147][ T3303] loop2: p1 size 196608 extends beyond EOD, truncated [ 39.282262][ T3303] loop2: p2 start 164919041 is beyond EOD, truncated [ 39.289146][ T3303] loop2: p3 size 66846464 extends beyond EOD, truncated [ 39.291401][ T3621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 39.304961][ T3621] netlink: 60 bytes leftover after parsing attributes in process `syz.4.47'. [ 39.304979][ T3303] loop2: p4 size 37048832 extends beyond EOD, truncated [ 39.325763][ T3608] loop2: p1 p2 p3 p4 [ 39.330016][ T3608] loop2: p1 size 196608 extends beyond EOD, truncated [ 39.338157][ T3608] loop2: p2 start 164919041 is beyond EOD, truncated [ 39.344914][ T3608] loop2: p3 size 66846464 extends beyond EOD, truncated [ 39.352857][ T3608] loop2: p4 size 37048832 extends beyond EOD, truncated [ 39.490016][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.504169][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 39.516243][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 39.547704][ T3527] udevd[3527]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 39.559289][ T3528] udevd[3528]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 39.561275][ T3657] loop1: detected capacity change from 0 to 128 [ 39.575836][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 39.596329][ T3657] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 39.604367][ T3657] FAT-fs (loop1): Filesystem has been set read-only [ 39.611471][ T3657] syz.1.61: attempt to access beyond end of device [ 39.611471][ T3657] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 39.625643][ T3657] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 39.633593][ T3657] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 39.642536][ T3657] syz.1.61: attempt to access beyond end of device [ 39.642536][ T3657] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.649858][ T3661] loop2: detected capacity change from 0 to 2048 [ 39.657468][ T3657] syz.1.61: attempt to access beyond end of device [ 39.657468][ T3657] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 39.695178][ T3663] netlink: 'syz.1.64': attribute type 29 has an invalid length. [ 39.697782][ T3661] loop2: p1 < > p4 [ 39.702954][ T3663] netlink: 'syz.1.64': attribute type 3 has an invalid length. [ 39.715540][ T3661] loop2: p4 size 8388608 extends beyond EOD, truncated [ 39.899441][ T3670] loop1: detected capacity change from 0 to 8192 [ 39.937355][ T3670] loop1: p1 p2 p3 p4 [ 39.941632][ T3670] loop1: p1 size 196608 extends beyond EOD, truncated [ 39.949352][ T3670] loop1: p2 start 164919041 is beyond EOD, truncated [ 39.956085][ T3670] loop1: p3 size 66846464 extends beyond EOD, truncated [ 39.963943][ T3670] loop1: p4 size 37048832 extends beyond EOD, truncated [ 40.029416][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 40.039619][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 40.075271][ T3676] loop2: detected capacity change from 0 to 2048 [ 40.324606][ T3683] loop0: detected capacity change from 0 to 2048 [ 40.347070][ T3676] loop2: p1 < > p4 [ 40.373602][ T3676] loop2: p4 size 8388608 extends beyond EOD, truncated [ 40.389180][ T3303] loop0: p1 < > p4 [ 40.398167][ T3303] loop0: p4 size 8388608 extends beyond EOD, truncated [ 40.424238][ T3004] loop2: p1 < > p4 [ 40.433256][ T3004] loop2: p4 size 8388608 extends beyond EOD, truncated [ 40.457442][ T3683] loop0: p1 < > p4 [ 40.467369][ T3697] loop1: detected capacity change from 0 to 2048 [ 40.467705][ T3683] loop0: p4 size 8388608 extends beyond EOD, truncated [ 40.508257][ T3004] loop1: p1 < > p4 [ 40.517219][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.555576][ T3004] loop1: p1 < > p4 [ 40.565385][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.576198][ T3697] loop1: p1 < > p4 [ 40.580652][ T3697] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.599214][ T3707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.631773][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 40.631833][ T29] audit: type=1400 audit(1764637451.486:225): avc: denied { read write } for pid=3674 comm="syz.2.67" name="loop2p4" dev="devtmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.644242][ T3707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.661222][ T29] audit: type=1400 audit(1764637451.486:226): avc: denied { open } for pid=3674 comm="syz.2.67" path="/dev/loop2p4" dev="devtmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 40.685690][ T3004] loop1: p1 < > p4 [ 40.736585][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 40.749993][ T29] audit: type=1400 audit(1764637451.566:227): avc: denied { ioctl } for pid=3674 comm="syz.2.67" path="/dev/loop2p4" dev="devtmpfs" ino=598 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 41.036452][ T3717] loop4: detected capacity change from 0 to 256 [ 41.043426][ T3717] msdos: Unknown parameter 'ÿÿÿÿ' [ 41.245747][ T3683] __nla_validate_parse: 16 callbacks suppressed [ 41.245767][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 42.320227][ T3739] No such timeout policy "syz1" [ 42.365728][ T3741] netlink: 72 bytes leftover after parsing attributes in process `syz.0.89'. [ 42.416809][ T3743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 42.425726][ T3743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 42.549218][ T3743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 42.558101][ T3743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 42.666454][ T3743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 42.675364][ T3743] netlink: 60 bytes leftover after parsing attributes in process `syz.2.90'. [ 42.721591][ T29] audit: type=1400 audit(1764637453.566:228): avc: denied { write } for pid=3751 comm="syz.3.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 42.740825][ T29] audit: type=1400 audit(1764637453.566:229): avc: denied { name_connect } for pid=3751 comm="syz.3.92" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 42.765341][ T3752] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 42.779448][ T3756] netlink: 'syz.2.93': attribute type 29 has an invalid length. [ 42.787166][ T3756] netlink: 'syz.2.93': attribute type 4 has an invalid length. [ 42.881249][ T29] audit: type=1400 audit(1764637453.706:230): avc: denied { read } for pid=3759 comm="syz.3.96" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 42.885270][ T3764] program syz.2.98 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 42.903778][ T29] audit: type=1400 audit(1764637453.706:231): avc: denied { open } for pid=3759 comm="syz.3.96" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 42.936258][ T29] audit: type=1400 audit(1764637453.706:232): avc: denied { execute } for pid=3759 comm="syz.3.96" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=6182 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 42.978928][ T3764] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 43.016278][ T29] audit: type=1400 audit(1764637453.736:233): avc: denied { read write } for pid=3763 comm="syz.2.98" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.040176][ T29] audit: type=1400 audit(1764637453.736:234): avc: denied { open } for pid=3763 comm="syz.2.98" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 43.092921][ T3772] netlink: 72 bytes leftover after parsing attributes in process `syz.2.101'. [ 43.367009][ T3790] loop2: detected capacity change from 0 to 256 [ 43.373578][ T3790] vfat: Bad value for 'dmask' [ 43.456253][ T3797] No such timeout policy "syz1" [ 43.480172][ T3799] netlink: 72 bytes leftover after parsing attributes in process `syz.2.113'. [ 43.968199][ T3830] loop2: detected capacity change from 0 to 2048 [ 43.982778][ T3834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.007595][ T3830] loop2: p1 < > p4 [ 44.016688][ T3830] loop2: p4 size 8388608 extends beyond EOD, truncated [ 44.017244][ T3834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.034267][ T3836] loop4: detected capacity change from 0 to 2048 [ 44.167222][ T3836] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 44.248677][ T3836] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 44.290072][ T3846] loop3: detected capacity change from 0 to 256 [ 44.296908][ T3846] msdos: Unknown parameter 'ÿÿÿÿ' [ 44.524767][ T3836] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 596 with error 28 [ 44.537252][ T3836] EXT4-fs (loop4): This should not happen!! Data will be lost [ 44.537252][ T3836] [ 44.547003][ T3836] EXT4-fs (loop4): Total free blocks count 0 [ 44.552996][ T3836] EXT4-fs (loop4): Free/Dirty block details [ 44.558948][ T3836] EXT4-fs (loop4): free_blocks=2415919104 [ 44.564691][ T3836] EXT4-fs (loop4): dirty_blocks=608 [ 44.570003][ T3836] EXT4-fs (loop4): Block reservation details [ 44.576078][ T3836] EXT4-fs (loop4): i_reserved_data_blocks=38 [ 45.022383][ T3722] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 45.088921][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 45.108937][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 45.272611][ T3864] ======================================================= [ 45.272611][ T3864] WARNING: The mand mount option has been deprecated and [ 45.272611][ T3864] and is ignored by this kernel. Remove the mand [ 45.272611][ T3864] option from the mount to silence this warning. [ 45.272611][ T3864] ======================================================= [ 45.513030][ T3874] loop1: detected capacity change from 0 to 2048 [ 45.583766][ T3877] loop4: detected capacity change from 0 to 128 [ 45.617446][ T3874] loop1: p1 < > p4 [ 45.622344][ T3874] loop1: p4 size 8388608 extends beyond EOD, truncated [ 45.729855][ T3004] loop1: p1 < > p4 [ 45.770569][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 45.858714][ T3885] netlink: 'syz.2.148': attribute type 10 has an invalid length. [ 45.882918][ T3885] ipvlan2: entered promiscuous mode [ 45.889600][ T3885] bridge0: port 3(ipvlan2) entered blocking state [ 45.894897][ T3883] loop0: detected capacity change from 0 to 2048 [ 45.896158][ T3885] bridge0: port 3(ipvlan2) entered disabled state [ 45.908903][ T3882] loop4: detected capacity change from 0 to 2048 [ 45.910066][ T3885] ipvlan2: entered allmulticast mode [ 45.920864][ T3885] bridge0: entered allmulticast mode [ 45.927109][ T3885] ipvlan2: left allmulticast mode [ 45.932220][ T3885] bridge0: left allmulticast mode [ 45.953117][ T3882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 45.966596][ T29] kauditd_printk_skb: 39 callbacks suppressed [ 45.966609][ T29] audit: type=1326 audit(1764637456.826:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef013f749 code=0x7ffc0000 [ 45.996477][ T29] audit: type=1326 audit(1764637456.826:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef013f749 code=0x7ffc0000 [ 46.006984][ T3004] loop0: p1 < > p4 [ 46.019802][ T29] audit: type=1326 audit(1764637456.826:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9ef013f749 code=0x7ffc0000 [ 46.046905][ T29] audit: type=1326 audit(1764637456.826:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef013f749 code=0x7ffc0000 [ 46.070245][ T29] audit: type=1326 audit(1764637456.826:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9ef013f749 code=0x7ffc0000 [ 46.093578][ T29] audit: type=1326 audit(1764637456.826:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef013f749 code=0x7ffc0000 [ 46.093670][ T3004] loop0: p4 size 8388608 extends beyond EOD, [ 46.116867][ T29] audit: type=1326 audit(1764637456.826:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3880 comm="syz.4.147" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ef013f749 code=0x7ffc0000 [ 46.122960][ T3004] truncated [ 46.166831][ T3890] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.182178][ T3890] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 644 with error 28 [ 46.194714][ T3890] EXT4-fs (loop4): This should not happen!! Data will be lost [ 46.194714][ T3890] [ 46.204416][ T3890] EXT4-fs (loop4): Total free blocks count 0 [ 46.210442][ T3890] EXT4-fs (loop4): Free/Dirty block details [ 46.216392][ T3890] EXT4-fs (loop4): free_blocks=2415919104 [ 46.222227][ T3890] EXT4-fs (loop4): dirty_blocks=656 [ 46.227484][ T3890] EXT4-fs (loop4): Block reservation details [ 46.233525][ T3890] EXT4-fs (loop4): i_reserved_data_blocks=41 [ 46.235331][ T3883] loop0: p1 < > p4 [ 46.265012][ T3893] __nla_validate_parse: 5 callbacks suppressed [ 46.265028][ T3893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.146'. [ 46.312705][ T3883] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.346692][ T3897] loop2: detected capacity change from 0 to 256 [ 46.353253][ T3897] vfat: Bad value for 'dmask' [ 46.411594][ T3004] loop0: p1 < > p4 [ 46.421358][ T3004] loop0: p4 size 8388608 extends beyond EOD, truncated [ 46.434267][ T3900] loop2: detected capacity change from 0 to 2048 [ 46.470904][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 46.483028][ T3900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 46.496490][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 46.560522][ T29] audit: type=1326 audit(1764637457.406:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 46.583829][ T29] audit: type=1326 audit(1764637457.406:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 46.607098][ T29] audit: type=1326 audit(1764637457.416:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3899 comm="syz.2.150" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 46.726395][ T3900] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 46.749563][ T3722] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 46.770007][ T3900] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1874 with error 28 [ 46.782502][ T3900] EXT4-fs (loop2): This should not happen!! Data will be lost [ 46.782502][ T3900] [ 46.792244][ T3900] EXT4-fs (loop2): Total free blocks count 0 [ 46.798270][ T3900] EXT4-fs (loop2): Free/Dirty block details [ 46.804181][ T3900] EXT4-fs (loop2): free_blocks=2415919104 [ 46.808820][ T3913] loop1: detected capacity change from 0 to 128 [ 46.809946][ T3900] EXT4-fs (loop2): dirty_blocks=1888 [ 46.821573][ T3900] EXT4-fs (loop2): Block reservation details [ 46.823499][ T3913] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.827597][ T3900] EXT4-fs (loop2): i_reserved_data_blocks=118 [ 46.841727][ T3913] FAT-fs (loop1): Filesystem has been set read-only [ 46.864316][ T3913] syz.1.156: attempt to access beyond end of device [ 46.864316][ T3913] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 46.895940][ T3917] loop0: detected capacity change from 0 to 128 [ 46.910119][ T3913] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.918070][ T3913] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 46.926981][ T12] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 46.939692][ T3913] syz.1.156: attempt to access beyond end of device [ 46.939692][ T3913] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 46.963385][ T3913] syz.1.156: attempt to access beyond end of device [ 46.963385][ T3913] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 47.014319][ T3921] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.062295][ T3926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.159'. [ 47.202652][ T3921] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.213268][ T3939] loop2: detected capacity change from 0 to 128 [ 47.234809][ T3940] loop1: detected capacity change from 0 to 2048 [ 47.253099][ T3939] netlink: 4 bytes leftover after parsing attributes in process `syz.2.168'. [ 47.291780][ T3921] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.316676][ T3710] loop1: p1 < > p4 [ 47.377536][ T3710] loop1: p4 size 8388608 extends beyond EOD, truncated [ 47.402043][ T3921] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.646821][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.673122][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.687098][ T3940] loop1: p1 < > p4 [ 47.693348][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.702298][ T3940] loop1: p4 size 8388608 extends beyond EOD, truncated [ 47.709313][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.868057][ T3949] loop0: detected capacity change from 0 to 128 [ 47.973034][ T3939] syz.2.168: attempt to access beyond end of device [ 47.973034][ T3939] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 47.986443][ T3939] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 48.024160][ T3940] netlink: 4 bytes leftover after parsing attributes in process `syz.1.167'. [ 48.132339][ T3970] netlink: 'syz.2.179': attribute type 10 has an invalid length. [ 48.140270][ T3970] netlink: 32 bytes leftover after parsing attributes in process `syz.2.179'. [ 48.179684][ T3970] ipvlan2: entered promiscuous mode [ 48.196190][ T3970] bridge0: port 3(ipvlan2) entered blocking state [ 48.203147][ T3970] bridge0: port 3(ipvlan2) entered disabled state [ 48.225729][ T3970] ipvlan2: entered allmulticast mode [ 48.231147][ T3970] bridge0: entered allmulticast mode [ 48.243359][ T3970] ipvlan2: left allmulticast mode [ 48.248505][ T3970] bridge0: left allmulticast mode [ 48.351075][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 48.545888][ T3997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.632414][ T3997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.719278][ T3997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.779378][ T3997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 48.844793][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.863418][ T31] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.876143][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.893168][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.022641][ T4003] loop3: detected capacity change from 0 to 2048 [ 49.071734][ T4003] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.108526][ T4014] loop0: detected capacity change from 0 to 2048 [ 49.118508][ T4014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 49.222865][ T4025] netlink: 'syz.2.199': attribute type 10 has an invalid length. [ 49.230748][ T4025] netlink: 32 bytes leftover after parsing attributes in process `syz.2.199'. [ 49.245449][ T4019] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.261140][ T4019] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1164 with error 28 [ 49.273659][ T4019] EXT4-fs (loop3): This should not happen!! Data will be lost [ 49.273659][ T4019] [ 49.276005][ T4014] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 49.283374][ T4019] EXT4-fs (loop3): Total free blocks count 0 [ 49.283392][ T4019] EXT4-fs (loop3): Free/Dirty block details [ 49.305387][ T4014] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 716 with error 28 [ 49.310027][ T4019] EXT4-fs (loop3): free_blocks=2415919104 [ 49.322407][ T4014] EXT4-fs (loop0): This should not happen!! Data will be lost [ 49.322407][ T4014] [ 49.328154][ T4019] EXT4-fs (loop3): dirty_blocks=1168 [ 49.337843][ T4014] EXT4-fs (loop0): Total free blocks count 0 [ 49.343223][ T4019] EXT4-fs (loop3): Block reservation details [ 49.349133][ T4014] EXT4-fs (loop0): Free/Dirty block details [ 49.349146][ T4014] EXT4-fs (loop0): free_blocks=2415919104 [ 49.355116][ T4019] EXT4-fs (loop3): i_reserved_data_blocks=73 [ 49.361084][ T4014] EXT4-fs (loop0): dirty_blocks=720 [ 49.378134][ T4014] EXT4-fs (loop0): Block reservation details [ 49.384165][ T4014] EXT4-fs (loop0): i_reserved_data_blocks=45 [ 49.393110][ T4027] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.419648][ T4025] ipvlan2: entered promiscuous mode [ 49.425993][ T4025] bridge0: port 3(ipvlan2) entered blocking state [ 49.432529][ T4025] bridge0: port 3(ipvlan2) entered disabled state [ 49.432889][ T4032] loop1: detected capacity change from 0 to 8192 [ 49.445748][ T4025] ipvlan2: entered allmulticast mode [ 49.451188][ T4025] bridge0: entered allmulticast mode [ 49.457023][ T4025] ipvlan2: left allmulticast mode [ 49.462229][ T4025] bridge0: left allmulticast mode [ 49.481553][ T1691] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 49.496468][ T4027] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.517177][ T3710] loop1: p1 p2 p3 p4 [ 49.521308][ T3710] loop1: p1 size 196608 extends beyond EOD, truncated [ 49.528879][ T3710] loop1: p2 start 164919041 is beyond EOD, truncated [ 49.535593][ T3710] loop1: p3 size 66846464 extends beyond EOD, truncated [ 49.546445][ T3710] loop1: p4 size 37048832 extends beyond EOD, truncated [ 49.564016][ T4032] loop1: p1 p2 p3 p4 [ 49.568206][ T4032] loop1: p1 size 196608 extends beyond EOD, truncated [ 49.575795][ T4032] loop1: p2 start 164919041 is beyond EOD, truncated [ 49.582612][ T4032] loop1: p3 size 66846464 extends beyond EOD, truncated [ 49.604761][ T4032] loop1: p4 size 37048832 extends beyond EOD, truncated [ 49.640120][ T4027] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.711482][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 49.711901][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.726368][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 49.755783][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 49.775340][ T4046] loop0: detected capacity change from 0 to 256 [ 49.782197][ T4046] msdos: Unknown parameter 'ÿÿÿÿ' [ 49.818263][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 49.933631][ T4027] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 50.004799][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 50.039194][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 50.255557][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 50.274501][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 50.300044][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 50.314985][ T31] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.370712][ T31] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.500843][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.554497][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.621818][ T4057] netlink: 20 bytes leftover after parsing attributes in process `syz.4.212'. [ 50.957574][ T4065] loop3: detected capacity change from 0 to 2048 [ 50.973113][ T4069] netlink: 'syz.2.216': attribute type 10 has an invalid length. [ 50.980914][ T4069] netlink: 32 bytes leftover after parsing attributes in process `syz.2.216'. [ 51.008494][ T4065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 51.025040][ T4069] ipvlan2: entered promiscuous mode [ 51.031897][ T29] kauditd_printk_skb: 118 callbacks suppressed [ 51.031911][ T29] audit: type=1326 audit(1764637461.886:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.047460][ T4069] bridge0: port 3(ipvlan2) entered blocking state [ 51.061419][ T29] audit: type=1326 audit(1764637461.886:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.067929][ T4069] bridge0: port 3(ipvlan2) entered disabled state [ 51.091210][ T29] audit: type=1326 audit(1764637461.906:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.120732][ T29] audit: type=1326 audit(1764637461.906:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.144018][ T29] audit: type=1326 audit(1764637461.906:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.169931][ T4069] ipvlan2: entered allmulticast mode [ 51.175318][ T4069] bridge0: entered allmulticast mode [ 51.192728][ T4069] ipvlan2: left allmulticast mode [ 51.197933][ T4069] bridge0: left allmulticast mode [ 51.247128][ T4074] loop1: detected capacity change from 0 to 2048 [ 51.274571][ T4065] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 51.290561][ T29] audit: type=1326 audit(1764637462.056:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.313925][ T29] audit: type=1326 audit(1764637462.056:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.337182][ T29] audit: type=1326 audit(1764637462.056:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.360440][ T29] audit: type=1326 audit(1764637462.056:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.375740][ T4065] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 744 with max blocks 280 with error 28 [ 51.383658][ T29] audit: type=1326 audit(1764637462.056:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4064 comm="syz.3.214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 51.396302][ T4065] EXT4-fs (loop3): This should not happen!! Data will be lost [ 51.396302][ T4065] [ 51.421581][ T3710] loop1: p1 < > p4 [ 51.429139][ T4065] EXT4-fs (loop3): Total free blocks count 0 [ 51.438970][ T4065] EXT4-fs (loop3): Free/Dirty block details [ 51.444987][ T4065] EXT4-fs (loop3): free_blocks=2415919104 [ 51.451022][ T4065] EXT4-fs (loop3): dirty_blocks=1040 [ 51.456343][ T4065] EXT4-fs (loop3): Block reservation details [ 51.462389][ T4065] EXT4-fs (loop3): i_reserved_data_blocks=65 [ 51.462705][ T3710] loop1: p4 size 8388608 extends beyond EOD, truncated [ 51.477197][ T4074] loop_reread_partitions: partition scan of loop1 () failed (rc=-16) [ 51.640749][ T1691] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 52.587871][ T4102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.217'. [ 53.051083][ T4117] loop2: detected capacity change from 0 to 256 [ 53.058009][ T4117] msdos: Unknown parameter 'ÿÿÿÿ' [ 53.612392][ T4126] loop3: detected capacity change from 0 to 128 [ 54.521759][ T4143] loop1: detected capacity change from 0 to 128 [ 54.810286][ T4143] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 54.818213][ T4143] FAT-fs (loop1): Filesystem has been set read-only [ 55.003137][ T4143] syz.1.240: attempt to access beyond end of device [ 55.003137][ T4143] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 55.135802][ T4143] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.143715][ T4143] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 55.152289][ T4143] syz.1.240: attempt to access beyond end of device [ 55.152289][ T4143] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.165644][ T4143] syz.1.240: attempt to access beyond end of device [ 55.165644][ T4143] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 55.179973][ T4148] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.269429][ T4153] loop3: detected capacity change from 0 to 2048 [ 55.331885][ T4153] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 55.407666][ T4153] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 55.424876][ T4148] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.452664][ T4153] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1188 with error 28 [ 55.465243][ T4153] EXT4-fs (loop3): This should not happen!! Data will be lost [ 55.465243][ T4153] [ 55.474957][ T4153] EXT4-fs (loop3): Total free blocks count 0 [ 55.475067][ T4164] loop2: detected capacity change from 0 to 8192 [ 55.481029][ T4153] EXT4-fs (loop3): Free/Dirty block details [ 55.481070][ T4153] EXT4-fs (loop3): free_blocks=2415919104 [ 55.499179][ T4153] EXT4-fs (loop3): dirty_blocks=1200 [ 55.504528][ T4153] EXT4-fs (loop3): Block reservation details [ 55.510567][ T4153] EXT4-fs (loop3): i_reserved_data_blocks=75 [ 55.526417][ T4162] loop1: detected capacity change from 0 to 256 [ 55.533182][ T4162] vfat: Bad value for 'dmask' [ 55.548940][ T4148] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.594593][ T4170] loop1: detected capacity change from 0 to 128 [ 55.601861][ T3710] loop2: p1 p2 p3 p4 [ 55.610262][ T3710] loop2: p1 size 196608 extends beyond EOD, truncated [ 55.626974][ T3710] loop2: p2 start 164919041 is beyond EOD, truncated [ 55.633720][ T3710] loop2: p3 size 66846464 extends beyond EOD, truncated [ 55.651940][ T4148] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.663950][ T31] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 55.664261][ T3710] loop2: p4 size 37048832 extends beyond EOD, truncated [ 55.700239][ T4164] loop2: p1 p2 p3 p4 [ 55.704360][ T4164] loop2: p1 size 196608 extends beyond EOD, truncated [ 55.717583][ T4164] loop2: p2 start 164919041 is beyond EOD, truncated [ 55.724325][ T4164] loop2: p3 size 66846464 extends beyond EOD, truncated [ 55.749849][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.762703][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.785735][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.807139][ T4164] loop2: p4 size 37048832 extends beyond EOD, truncated [ 55.827841][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.889995][ T4184] loop0: detected capacity change from 0 to 128 [ 55.970197][ T4184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.254'. [ 56.382671][ T4190] syz.0.254: attempt to access beyond end of device [ 56.382671][ T4190] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.396120][ T4190] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.405212][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 56.414144][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 56.423453][ T4184] syz.0.254: attempt to access beyond end of device [ 56.423453][ T4184] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.436872][ T4184] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.445864][ T4196] loop3: detected capacity change from 0 to 2048 [ 56.480882][ T4184] syz.0.254: attempt to access beyond end of device [ 56.480882][ T4184] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 56.494258][ T4184] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 56.497091][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 56.511755][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 56.513582][ T4196] loop3: p1 < > p4 [ 56.553024][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 56.553234][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.575642][ T4196] loop3: p4 size 8388608 extends beyond EOD, truncated [ 56.584246][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.666138][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 56.675168][ T4195] netlink: 60 bytes leftover after parsing attributes in process `syz.2.257'. [ 56.685439][ T4203] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.710197][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.731403][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.757360][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 56.800740][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 56.800774][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 56.811830][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 56.835165][ T4214] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.879497][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 56.893826][ T4219] loop1: detected capacity change from 0 to 128 [ 56.899480][ T4203] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.927666][ T4219] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.935562][ T4219] FAT-fs (loop1): Filesystem has been set read-only [ 56.946116][ T4214] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 56.951665][ T4219] syz.1.267: attempt to access beyond end of device [ 56.951665][ T4219] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 56.970959][ T4196] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 56.980221][ T4216] loop0: detected capacity change from 0 to 8192 [ 56.980313][ T4219] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 56.994507][ T4219] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 57.003044][ T4219] syz.1.267: attempt to access beyond end of device [ 57.003044][ T4219] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.016466][ T4219] syz.1.267: attempt to access beyond end of device [ 57.016466][ T4219] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 57.017516][ T4203] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.048570][ T3710] loop0: p1 p2 p3 p4 [ 57.052685][ T3710] loop0: p1 size 196608 extends beyond EOD, truncated [ 57.064195][ T4214] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.074469][ T3710] loop0: p2 start 164919041 is beyond EOD, truncated [ 57.081409][ T3710] loop0: p3 size 66846464 extends beyond EOD, truncated [ 57.091412][ T3710] loop0: p4 size 37048832 extends beyond EOD, truncated [ 57.109599][ T4203] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.188238][ T4214] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 57.206048][ T4216] loop0: p1 p2 p3 p4 [ 57.210857][ T4216] loop0: p1 size 196608 extends beyond EOD, truncated [ 57.220155][ T4216] loop0: p2 start 164919041 is beyond EOD, truncated [ 57.227085][ T4216] loop0: p3 size 66846464 extends beyond EOD, truncated [ 57.239172][ T4216] loop0: p4 size 37048832 extends beyond EOD, truncated [ 57.304658][ T4229] 9pnet_fd: Insufficient options for proto=fd [ 57.315750][ T3004] loop0: p1 p2 p3 p4 [ 57.326599][ T3004] loop0: p1 size 196608 extends beyond EOD, truncated [ 57.342646][ T4231] loop3: detected capacity change from 0 to 2048 [ 57.354557][ T3004] loop0: p2 start 164919041 is beyond EOD, truncated [ 57.361330][ T3004] loop0: p3 size 66846464 extends beyond EOD, truncated [ 57.375423][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.387794][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.390209][ T3004] loop0: p4 size 37048832 extends beyond EOD, truncated [ 57.409559][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.419046][ T4231] loop3: p1 < > p4 [ 57.423741][ T4231] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.430076][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.453758][ T4233] loop2: detected capacity change from 0 to 128 [ 57.481261][ T3004] loop3: p1 < > p4 [ 57.495039][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated [ 57.517151][ T4233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'. [ 57.723498][ T4231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.272'. [ 57.877456][ T4233] syz.2.273: attempt to access beyond end of device [ 57.877456][ T4233] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 57.890997][ T4233] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 57.947040][ T4236] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 57.961518][ T4244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.276'. [ 57.970657][ T4244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.276'. [ 58.148788][ T4244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.276'. [ 58.157900][ T4244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.276'. [ 58.192558][ T4244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.276'. [ 58.201631][ T4244] netlink: 60 bytes leftover after parsing attributes in process `syz.3.276'. [ 58.278808][ T4261] loop3: detected capacity change from 0 to 2048 [ 58.284294][ T3450] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.296766][ T3450] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.327158][ T3450] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.335461][ T3450] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.402992][ T4261] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.416279][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 58.416292][ T29] audit: type=1326 audit(1764637469.266:447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.470522][ T29] audit: type=1326 audit(1764637469.266:448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.493926][ T29] audit: type=1326 audit(1764637469.266:449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.517331][ T29] audit: type=1326 audit(1764637469.266:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.540834][ T29] audit: type=1326 audit(1764637469.266:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.564093][ T29] audit: type=1326 audit(1764637469.266:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.587355][ T29] audit: type=1326 audit(1764637469.266:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.602743][ T4261] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, [ 58.610586][ T29] audit: type=1326 audit(1764637469.266:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.618928][ T4261] block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 58.642077][ T29] audit: type=1326 audit(1764637469.266:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.674107][ T29] audit: type=1326 audit(1764637469.266:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4258 comm="syz.3.281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 58.717855][ T4261] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 58.730419][ T4261] EXT4-fs (loop3): This should not happen!! Data will be lost [ 58.730419][ T4261] [ 58.740126][ T4261] EXT4-fs (loop3): Total free blocks count 0 [ 58.746186][ T4261] EXT4-fs (loop3): Free/Dirty block details [ 58.752128][ T4261] EXT4-fs (loop3): free_blocks=2415919104 [ 58.757951][ T4261] EXT4-fs (loop3): dirty_blocks=2832 [ 58.763298][ T4261] EXT4-fs (loop3): Block reservation details [ 58.769370][ T4261] EXT4-fs (loop3): i_reserved_data_blocks=177 [ 58.793382][ T4276] loop1: detected capacity change from 0 to 2048 [ 58.942926][ T4276] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 58.987888][ T4271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.285'. [ 59.022038][ T4286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.291'. [ 59.031234][ T4286] netlink: 60 bytes leftover after parsing attributes in process `syz.0.291'. [ 59.035229][ T3450] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 780 with error 28 [ 59.105832][ T4288] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 59.129186][ T4288] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1174 with error 28 [ 59.141806][ T4288] EXT4-fs (loop1): This should not happen!! Data will be lost [ 59.141806][ T4288] [ 59.151551][ T4288] EXT4-fs (loop1): Total free blocks count 0 [ 59.157612][ T4288] EXT4-fs (loop1): Free/Dirty block details [ 59.163532][ T4288] EXT4-fs (loop1): free_blocks=2415919104 [ 59.169359][ T4288] EXT4-fs (loop1): dirty_blocks=1184 [ 59.174687][ T4288] EXT4-fs (loop1): Block reservation details [ 59.180752][ T4288] EXT4-fs (loop1): i_reserved_data_blocks=74 [ 59.414139][ T4310] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.468260][ T4310] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.508511][ T4310] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.535521][ T4316] 9pnet_fd: Insufficient options for proto=fd [ 59.548412][ T4310] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.602528][ T3450] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 59.992201][ T4336] netlink: 'syz.4.306': attribute type 29 has an invalid length. [ 60.348164][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.389375][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.409612][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.439926][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.701754][ T4353] loop0: detected capacity change from 0 to 2048 [ 60.788621][ T3710] loop0: p1 < > p4 [ 60.796545][ T3710] loop0: p4 size 8388608 extends beyond EOD, truncated [ 60.817526][ T4353] loop0: p1 < > p4 [ 60.821897][ T4353] loop0: p4 size 8388608 extends beyond EOD, truncated [ 60.886136][ T4362] netlink: 'syz.4.317': attribute type 29 has an invalid length. [ 60.992505][ T4368] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.068234][ T4368] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.130770][ T4368] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.185510][ T4379] loop2: detected capacity change from 0 to 128 [ 61.205205][ T4368] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.233955][ T4384] loop2: detected capacity change from 0 to 128 [ 61.669974][ T4389] bio_check_eod: 1 callbacks suppressed [ 61.669988][ T4389] syz.2.326: attempt to access beyond end of device [ 61.669988][ T4389] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 61.688974][ T4389] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 61.744091][ T4384] syz.2.326: attempt to access beyond end of device [ 61.744091][ T4384] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 61.757577][ T4384] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 61.868785][ T4384] syz.2.326: attempt to access beyond end of device [ 61.868785][ T4384] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 61.882218][ T4384] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 62.029068][ T4408] loop1: detected capacity change from 0 to 2048 [ 62.087046][ T3723] loop1: p1 < > p4 [ 62.091801][ T3723] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.110687][ T4408] loop1: p1 < > p4 [ 62.111119][ T4408] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.332835][ T4418] loop0: detected capacity change from 0 to 2048 [ 62.397781][ T4418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 62.488920][ T4418] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 62.525334][ T4432] loop2: detected capacity change from 0 to 128 [ 62.567060][ T4434] loop1: detected capacity change from 0 to 2048 [ 62.576706][ T4418] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1138 with error 28 [ 62.589236][ T4418] EXT4-fs (loop0): This should not happen!! Data will be lost [ 62.589236][ T4418] [ 62.599014][ T4418] EXT4-fs (loop0): Total free blocks count 0 [ 62.605018][ T4418] EXT4-fs (loop0): Free/Dirty block details [ 62.610978][ T4418] EXT4-fs (loop0): free_blocks=2415919104 [ 62.616747][ T4418] EXT4-fs (loop0): dirty_blocks=1152 [ 62.622046][ T4418] EXT4-fs (loop0): Block reservation details [ 62.628062][ T4418] EXT4-fs (loop0): i_reserved_data_blocks=72 [ 62.667806][ T4434] loop1: p1 < > p4 [ 62.674553][ T4434] loop1: p4 size 8388608 extends beyond EOD, truncated [ 62.712061][ T31] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 62.893773][ T4436] syz.2.345: attempt to access beyond end of device [ 62.893773][ T4436] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.907340][ T4436] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 62.926922][ T4432] syz.2.345: attempt to access beyond end of device [ 62.926922][ T4432] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.940302][ T4432] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 62.955379][ T4434] __nla_validate_parse: 16 callbacks suppressed [ 62.955393][ T4434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.346'. [ 62.982838][ T4432] syz.2.345: attempt to access beyond end of device [ 62.982838][ T4432] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 62.996224][ T4432] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 63.263923][ T4463] loop1: detected capacity change from 0 to 256 [ 63.270901][ T4463] vfat: Bad value for 'dmask' [ 63.330489][ T4471] netlink: 20 bytes leftover after parsing attributes in process `syz.1.360'. [ 63.369776][ T3450] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.378173][ T4466] loop2: detected capacity change from 0 to 2048 [ 63.401879][ T3450] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.422808][ T4466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 63.437402][ T31] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.452617][ T31] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.478452][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 63.478468][ T29] audit: type=1326 audit(1764637474.336:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.523244][ T29] audit: type=1326 audit(1764637474.366:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.546541][ T29] audit: type=1326 audit(1764637474.366:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.570028][ T29] audit: type=1326 audit(1764637474.366:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.593313][ T29] audit: type=1326 audit(1764637474.366:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.612876][ T4466] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 63.616607][ T29] audit: type=1326 audit(1764637474.366:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.653265][ T4466] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 63.654703][ T29] audit: type=1326 audit(1764637474.366:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.666742][ T4466] EXT4-fs (loop2): This should not happen!! Data will be lost [ 63.666742][ T4466] [ 63.689995][ T29] audit: type=1326 audit(1764637474.366:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.699692][ T4466] EXT4-fs (loop2): Total free blocks count 0 [ 63.722849][ T29] audit: type=1326 audit(1764637474.366:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.728936][ T4466] EXT4-fs (loop2): Free/Dirty block details [ 63.752246][ T29] audit: type=1326 audit(1764637474.366:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4465 comm="syz.2.358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb3cb6bf749 code=0x7ffc0000 [ 63.758034][ T4466] EXT4-fs (loop2): free_blocks=2415919104 [ 63.758049][ T4466] EXT4-fs (loop2): dirty_blocks=32 [ 63.758064][ T4466] EXT4-fs (loop2): Block reservation details [ 63.798419][ T4466] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 63.807937][ T4487] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.855638][ T3320] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 63.867448][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.366'. [ 65.243288][ T4543] loop3: detected capacity change from 0 to 256 [ 65.249896][ T4543] vfat: Bad value for 'dmask' [ 65.357229][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.385'. [ 65.409877][ T4557] loop1: detected capacity change from 0 to 2048 [ 65.427670][ T4560] loop2: detected capacity change from 0 to 128 [ 65.449717][ T4560] netlink: 4 bytes leftover after parsing attributes in process `syz.2.395'. [ 65.481643][ T4557] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 65.584363][ T4557] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 65.655548][ T4557] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 290 with error 28 [ 65.668010][ T4557] EXT4-fs (loop1): This should not happen!! Data will be lost [ 65.668010][ T4557] [ 65.677686][ T4557] EXT4-fs (loop1): Total free blocks count 0 [ 65.683680][ T4557] EXT4-fs (loop1): Free/Dirty block details [ 65.689610][ T4557] EXT4-fs (loop1): free_blocks=2415919104 [ 65.695341][ T4557] EXT4-fs (loop1): dirty_blocks=304 [ 65.700623][ T4557] EXT4-fs (loop1): Block reservation details [ 65.706653][ T4557] EXT4-fs (loop1): i_reserved_data_blocks=19 [ 65.738829][ T12] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 65.783486][ T4563] syz.2.395: attempt to access beyond end of device [ 65.783486][ T4563] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.796888][ T4563] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 65.809194][ T4560] syz.2.395: attempt to access beyond end of device [ 65.809194][ T4560] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.822581][ T4560] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 65.890981][ T4560] syz.2.395: attempt to access beyond end of device [ 65.890981][ T4560] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 65.904477][ T4560] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 66.362077][ T4589] loop3: detected capacity change from 0 to 2048 [ 66.407189][ T3710] loop3: p1 < > p4 [ 66.411644][ T3710] loop3: p4 size 8388608 extends beyond EOD, truncated [ 66.423043][ T4589] loop3: p1 < > p4 [ 66.427661][ T4589] loop3: p4 size 8388608 extends beyond EOD, truncated [ 66.544723][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.406'. [ 66.730527][ T4610] loop1: detected capacity change from 0 to 2048 [ 66.767737][ T3004] loop1: p1 < > p4 [ 66.805832][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.818034][ T3004] loop1: p1 < > p4 [ 66.824398][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.834691][ T4617] loop3: detected capacity change from 0 to 2048 [ 66.845992][ T4610] loop1: p1 < > p4 [ 66.851069][ T4610] loop1: p4 size 8388608 extends beyond EOD, truncated [ 66.877850][ T4617] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 66.912971][ T3004] loop1: p1 < > p4 [ 66.920671][ T3004] loop1: p4 size 8388608 extends beyond EOD, truncated [ 67.002792][ T4617] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 67.034870][ T4617] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 372 with error 28 [ 67.047333][ T4617] EXT4-fs (loop3): This should not happen!! Data will be lost [ 67.047333][ T4617] [ 67.057023][ T4617] EXT4-fs (loop3): Total free blocks count 0 [ 67.063092][ T4617] EXT4-fs (loop3): Free/Dirty block details [ 67.069067][ T4617] EXT4-fs (loop3): free_blocks=2415919104 [ 67.074809][ T4617] EXT4-fs (loop3): dirty_blocks=384 [ 67.080068][ T4617] EXT4-fs (loop3): Block reservation details [ 67.086086][ T4617] EXT4-fs (loop3): i_reserved_data_blocks=24 [ 67.093069][ T4633] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.107581][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.1.415'. [ 67.128579][ T4633] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.166165][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 67.189823][ T4633] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.248649][ T4633] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.299962][ T4649] netlink: 20 bytes leftover after parsing attributes in process `syz.3.431'. [ 67.397370][ T4645] loop1: detected capacity change from 0 to 256 [ 67.403976][ T4645] vfat: Bad value for 'dmask' [ 68.274522][ T4669] loop3: detected capacity change from 0 to 2048 [ 68.309764][ T4669] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 68.368005][ T3450] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.388887][ T4669] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 68.406427][ T3450] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.418852][ T4669] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1260 with error 28 [ 68.431405][ T4669] EXT4-fs (loop3): This should not happen!! Data will be lost [ 68.431405][ T4669] [ 68.441083][ T4669] EXT4-fs (loop3): Total free blocks count 0 [ 68.443417][ T3450] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.447130][ T4669] EXT4-fs (loop3): Free/Dirty block details [ 68.461222][ T4669] EXT4-fs (loop3): free_blocks=2415919104 [ 68.466991][ T4669] EXT4-fs (loop3): dirty_blocks=1264 [ 68.472516][ T4669] EXT4-fs (loop3): Block reservation details [ 68.478546][ T4669] EXT4-fs (loop3): i_reserved_data_blocks=79 [ 68.509917][ T3450] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.533575][ T29] kauditd_printk_skb: 63 callbacks suppressed [ 68.533604][ T29] audit: type=1326 audit(1764637479.386:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 68.563150][ T29] audit: type=1326 audit(1764637479.386:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4668 comm="syz.3.438" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 68.635337][ T3450] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 69.046108][ T4706] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.208474][ T4706] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.219658][ T4716] loop1: detected capacity change from 0 to 2048 [ 69.265223][ T4710] netlink: 4 bytes leftover after parsing attributes in process `syz.4.454'. [ 69.327619][ T4716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 69.341202][ T29] audit: type=1326 audit(1764637480.196:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.364612][ T29] audit: type=1326 audit(1764637480.196:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.388201][ T29] audit: type=1326 audit(1764637480.196:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.411846][ T29] audit: type=1326 audit(1764637480.196:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.435144][ T29] audit: type=1326 audit(1764637480.196:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.458422][ T29] audit: type=1326 audit(1764637480.196:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.462399][ T4716] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 69.481714][ T29] audit: type=1326 audit(1764637480.196:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.497476][ T4716] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 964 with error 28 [ 69.519732][ T29] audit: type=1326 audit(1764637480.196:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4715 comm="syz.1.457" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06ccbaf749 code=0x7ffc0000 [ 69.555357][ T4716] EXT4-fs (loop1): This should not happen!! Data will be lost [ 69.555357][ T4716] [ 69.565045][ T4716] EXT4-fs (loop1): Total free blocks count 0 [ 69.571161][ T4716] EXT4-fs (loop1): Free/Dirty block details [ 69.577186][ T4716] EXT4-fs (loop1): free_blocks=2415919104 [ 69.582917][ T4716] EXT4-fs (loop1): dirty_blocks=976 [ 69.588222][ T4716] EXT4-fs (loop1): Block reservation details [ 69.594215][ T4716] EXT4-fs (loop1): i_reserved_data_blocks=61 [ 69.674776][ T4706] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.744581][ T4706] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.897333][ T1084] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.928973][ T1084] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.973123][ T1084] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.981802][ T1084] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.012332][ T1691] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 70.351578][ T4762] loop1: detected capacity change from 0 to 2048 [ 70.477565][ T4762] loop1: p1 < > p4 [ 70.515105][ T4762] loop1: p4 size 8388608 extends beyond EOD, truncated [ 70.553205][ T4768] loop2: detected capacity change from 0 to 128 [ 70.616577][ T4768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.477'. [ 70.669474][ T4762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 71.123758][ T4768] syz.2.477: attempt to access beyond end of device [ 71.123758][ T4768] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 71.137138][ T4768] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 71.174798][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 71.187970][ T4771] syz.2.477: attempt to access beyond end of device [ 71.187970][ T4771] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 71.201339][ T4771] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 71.212143][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 71.235166][ T4783] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.262061][ T4771] syz.2.477: attempt to access beyond end of device [ 71.262061][ T4771] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 71.275468][ T4771] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 71.431093][ T4783] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.497322][ T4799] loop2: detected capacity change from 0 to 2048 [ 71.507776][ T4783] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.570727][ T4783] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.581714][ T4799] loop2: p1 < > p4 [ 71.587664][ T4799] loop2: p4 size 8388608 extends beyond EOD, truncated [ 71.695953][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.780242][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.875338][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.923401][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.037961][ T4799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.488'. [ 72.059822][ T4812] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.099655][ T4816] 9pnet_fd: Insufficient options for proto=fd [ 72.120028][ T4812] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.198884][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 72.210289][ T3723] udevd[3723]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 72.229475][ T4812] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.245779][ T4824] loop0: detected capacity change from 0 to 128 [ 72.271134][ T4812] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.289990][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.0.496'. [ 72.586812][ T4826] syz.0.496: attempt to access beyond end of device [ 72.586812][ T4826] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 72.600213][ T4826] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 72.627175][ T4826] syz.0.496: attempt to access beyond end of device [ 72.627175][ T4826] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 72.640607][ T4826] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 72.662608][ T4832] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 72.744913][ T4835] loop0: detected capacity change from 0 to 2048 [ 72.770487][ T4835] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 73.019129][ T4840] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 73.038238][ T4840] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 186 with max blocks 150 with error 28 [ 73.050879][ T4840] EXT4-fs (loop0): This should not happen!! Data will be lost [ 73.050879][ T4840] [ 73.060541][ T4840] EXT4-fs (loop0): Total free blocks count 0 [ 73.066576][ T4840] EXT4-fs (loop0): Free/Dirty block details [ 73.072506][ T4840] EXT4-fs (loop0): free_blocks=2415919104 [ 73.078259][ T4840] EXT4-fs (loop0): dirty_blocks=352 [ 73.083514][ T4840] EXT4-fs (loop0): Block reservation details [ 73.089593][ T4840] EXT4-fs (loop0): i_reserved_data_blocks=22 [ 73.352294][ T4852] loop2: detected capacity change from 0 to 256 [ 73.358954][ T4852] vfat: Bad value for 'dmask' [ 73.439017][ T4857] loop2: detected capacity change from 0 to 2048 [ 73.477200][ T3710] loop2: p1 < > p4 [ 73.481662][ T3710] loop2: p4 size 8388608 extends beyond EOD, truncated [ 73.491256][ T4857] loop2: p1 < > p4 [ 73.495775][ T4857] loop2: p4 size 8388608 extends beyond EOD, truncated [ 73.571272][ T1084] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 73.638063][ T4857] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 73.659707][ T4859] loop0: detected capacity change from 0 to 8192 [ 73.697345][ T3710] loop0: p1 p2 p3 p4 [ 73.701507][ T3710] loop0: p1 size 196608 extends beyond EOD, truncated [ 73.709566][ T3710] loop0: p2 start 164919041 is beyond EOD, truncated [ 73.716360][ T3710] loop0: p3 size 66846464 extends beyond EOD, truncated [ 73.724483][ T3710] loop0: p4 size 37048832 extends beyond EOD, truncated [ 73.738751][ T4859] loop0: p1 p2 p3 p4 [ 73.742816][ T4859] loop0: p1 size 196608 extends beyond EOD, truncated [ 73.750392][ T4859] loop0: p2 start 164919041 is beyond EOD, truncated [ 73.757141][ T4859] loop0: p3 size 66846464 extends beyond EOD, truncated [ 73.775712][ T4859] loop0: p4 size 37048832 extends beyond EOD, truncated [ 73.809476][ T4866] loop2: detected capacity change from 0 to 128 [ 73.817194][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.818303][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.828785][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 73.854839][ T4866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 73.865046][ T3303] udevd[3303]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 73.868150][ T3711] udevd[3711]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 73.878147][ T3710] udevd[3710]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 73.917796][ T4870] loop0: detected capacity change from 0 to 2048 [ 74.019104][ T3710] loop0: p1 < > p4 [ 74.024138][ T3710] loop0: p4 size 8388608 extends beyond EOD, truncated [ 74.033929][ T4870] loop0: p1 < > p4 [ 74.040898][ T4870] loop0: p4 size 8388608 extends beyond EOD, truncated [ 74.142391][ T4876] 9pnet_fd: Insufficient options for proto=fd [ 74.191213][ T4866] syz.2.511: attempt to access beyond end of device [ 74.191213][ T4866] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.204661][ T4866] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 74.214680][ T4874] syz.2.511: attempt to access beyond end of device [ 74.214680][ T4874] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.228092][ T4874] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 74.248596][ T4874] syz.2.511: attempt to access beyond end of device [ 74.248596][ T4874] loop2: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 74.261993][ T4874] Buffer I/O error on dev loop2, logical block 128, lost async page write [ 74.304751][ T4870] netlink: 4 bytes leftover after parsing attributes in process `syz.0.512'. [ 74.578327][ T4885] loop3: detected capacity change from 0 to 256 [ 74.584920][ T4885] vfat: Bad value for 'dmask' [ 74.735639][ T4895] loop3: detected capacity change from 0 to 2048 [ 74.819821][ T3710] loop3: p1 < > p4 [ 74.826837][ T3710] loop3: p4 size 8388608 extends beyond EOD, truncated [ 74.851286][ T4895] loop3: p1 < > p4 [ 74.866696][ T4895] loop3: p4 size 8388608 extends beyond EOD, truncated [ 74.897947][ T3004] loop3: p1 < > p4 [ 74.902409][ T3004] loop3: p4 size 8388608 extends beyond EOD, truncated [ 75.108652][ T4895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.522'. [ 75.388978][ T4908] loop3: detected capacity change from 0 to 2048 [ 75.418407][ T4908] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 75.431819][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 75.431831][ T29] audit: type=1326 audit(1764637486.286:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.481425][ T29] audit: type=1326 audit(1764637486.316:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.504749][ T29] audit: type=1326 audit(1764637486.316:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.528048][ T29] audit: type=1326 audit(1764637486.316:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.551538][ T29] audit: type=1326 audit(1764637486.316:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.574850][ T29] audit: type=1326 audit(1764637486.316:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.598178][ T29] audit: type=1326 audit(1764637486.316:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.614002][ T4908] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 75.621546][ T29] audit: type=1326 audit(1764637486.316:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.640338][ T4908] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 708 with error 28 [ 75.659413][ T29] audit: type=1326 audit(1764637486.316:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.671778][ T4908] EXT4-fs (loop3): This should not happen!! Data will be lost [ 75.671778][ T4908] [ 75.671797][ T4908] EXT4-fs (loop3): Total free blocks count 0 [ 75.694992][ T29] audit: type=1326 audit(1764637486.316:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4906 comm="syz.3.525" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f940719f749 code=0x7ffc0000 [ 75.704622][ T4908] EXT4-fs (loop3): Free/Dirty block details [ 75.704637][ T4908] EXT4-fs (loop3): free_blocks=2415919104 [ 75.704650][ T4908] EXT4-fs (loop3): dirty_blocks=720 [ 75.704661][ T4908] EXT4-fs (loop3): Block reservation details [ 75.756921][ T4908] EXT4-fs (loop3): i_reserved_data_blocks=45 [ 75.833949][ T12] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 75.969923][ T4922] bridge0: port 1(bridge_slave_0) entered listening state [ 76.452571][ T4936] 9pnet_fd: Insufficient options for proto=fd [ 76.472188][ T1691] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.488202][ T1691] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.520469][ T1691] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.546662][ T1691] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.635784][ T4948] loop0: detected capacity change from 0 to 2048 [ 76.675630][ T4948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 76.878832][ T3313] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 76.909893][ T4960] loop2: detected capacity change from 0 to 2048 [ 76.980457][ T4968] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.996823][ T3710] loop2: p1 < > p4 [ 77.013243][ T3710] loop2: p4 size 8388608 extends beyond EOD, truncated [ 77.034805][ T4960] loop2: p1 < > p4 [ 77.040243][ T4968] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.059128][ T4960] loop2: p4 size 8388608 extends beyond EOD, truncated [ 77.108405][ T4968] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.170582][ T4968] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.306482][ T4976] loop0: detected capacity change from 0 to 256 [ 77.313221][ T4976] vfat: Bad value for 'dmask' [ 77.386507][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.2.545'. [ 77.511718][ T4984] loop3: detected capacity change from 0 to 2048 [ 77.530805][ T4984] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 77.655758][ T4984] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 77.793681][ T4984] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 382 with error 28 [ 77.806104][ T4984] EXT4-fs (loop3): This should not happen!! Data will be lost [ 77.806104][ T4984] [ 77.815776][ T4984] EXT4-fs (loop3): Total free blocks count 0 [ 77.821814][ T4984] EXT4-fs (loop3): Free/Dirty block details [ 77.827794][ T4984] EXT4-fs (loop3): free_blocks=2415919104 [ 77.833553][ T4984] EXT4-fs (loop3): dirty_blocks=384 [ 77.838925][ T4984] EXT4-fs (loop3): Block reservation details [ 77.844940][ T4984] EXT4-fs (loop3): i_reserved_data_blocks=24 [ 78.050683][ T5003] loop2: detected capacity change from 0 to 2048 [ 78.063523][ T52] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2 with error 28 [ 78.098513][ T5003] loop2: p1 < > p4 [ 78.115074][ T5003] loop2: p4 size 8388608 extends beyond EOD, truncated [ 78.322912][ T5009] loop0: detected capacity change from 0 to 128 [ 78.351729][ T5009] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 78.428489][ T5003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 78.574884][ T5009] syz.0.563: attempt to access beyond end of device [ 78.574884][ T5009] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 78.588299][ T5009] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 78.602774][ T5012] syz.0.563: attempt to access beyond end of device [ 78.602774][ T5012] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 78.616233][ T5012] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 78.625395][ T5012] syz.0.563: attempt to access beyond end of device [ 78.625395][ T5012] loop0: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 78.638759][ T5012] Buffer I/O error on dev loop0, logical block 128, lost async page write [ 79.311115][ T5054] loop3: detected capacity change from 0 to 128 [ 79.321013][ T5054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 79.461781][ T5054] ================================================================== [ 79.469926][ T5054] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 79.477958][ T5054] [ 79.480297][ T5054] write to 0xffff888119c96f14 of 4 bytes by task 5055 on cpu 0: [ 79.487937][ T5054] xas_set_mark+0x12b/0x140 [ 79.492464][ T5054] tag_pages_for_writeback+0xc2/0x290 [ 79.497860][ T5054] writeback_iter+0x340/0x820 [ 79.502571][ T5054] mpage_writepages+0x87/0x1250 [ 79.507434][ T5054] fat_writepages+0x24/0x30 [ 79.511974][ T5054] do_writepages+0x1c6/0x310 [ 79.516579][ T5054] file_write_and_wait_range+0x156/0x2c0 [ 79.522246][ T5054] __generic_file_fsync+0x46/0x160 [ 79.527415][ T5054] fat_file_fsync+0x49/0x100 [ 79.528857][ T5055] syz.3.578: attempt to access beyond end of device [ 79.528857][ T5055] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 79.532039][ T5054] vfs_fsync_range+0x10d/0x130 [ 79.545419][ T5055] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 79.550110][ T5054] generic_file_write_iter+0x1b8/0x2f0 [ 79.550144][ T5054] iter_file_splice_write+0x666/0xa60 [ 79.569428][ T5054] direct_splice_actor+0x156/0x2a0 [ 79.574549][ T5054] splice_direct_to_actor+0x312/0x680 [ 79.579924][ T5054] do_splice_direct+0xda/0x150 [ 79.584698][ T5054] do_sendfile+0x380/0x650 [ 79.589114][ T5054] __x64_sys_sendfile64+0x105/0x150 [ 79.594341][ T5054] x64_sys_call+0x2db1/0x3000 [ 79.599054][ T5054] do_syscall_64+0xd2/0x200 [ 79.603578][ T5054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.609481][ T5054] [ 79.611813][ T5054] read to 0xffff888119c96f14 of 4 bytes by task 5054 on cpu 1: [ 79.619359][ T5054] file_write_and_wait_range+0x10e/0x2c0 [ 79.625036][ T5054] __generic_file_fsync+0x46/0x160 [ 79.630157][ T5054] fat_file_fsync+0x49/0x100 [ 79.634753][ T5054] vfs_fsync_range+0x10d/0x130 [ 79.639529][ T5054] generic_file_write_iter+0x1b8/0x2f0 [ 79.644990][ T5054] iter_file_splice_write+0x666/0xa60 [ 79.650452][ T5054] direct_splice_actor+0x156/0x2a0 [ 79.655577][ T5054] splice_direct_to_actor+0x312/0x680 [ 79.660980][ T5054] do_splice_direct+0xda/0x150 [ 79.665764][ T5054] do_sendfile+0x380/0x650 [ 79.670176][ T5054] __x64_sys_sendfile64+0x105/0x150 [ 79.675388][ T5054] x64_sys_call+0x2db1/0x3000 [ 79.680066][ T5054] do_syscall_64+0xd2/0x200 [ 79.684592][ T5054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.690492][ T5054] [ 79.692849][ T5054] value changed: 0x02000021 -> 0x04000021 [ 79.698588][ T5054] [ 79.700906][ T5054] Reported by Kernel Concurrency Sanitizer on: [ 79.707078][ T5054] CPU: 1 UID: 0 PID: 5054 Comm: syz.3.578 Not tainted syzkaller #0 PREEMPT(voluntary) [ 79.716712][ T5054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 79.726768][ T5054] ================================================================== [ 79.746236][ T5054] syz.3.578: attempt to access beyond end of device [ 79.746236][ T5054] loop3: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 79.759765][ T5054] Buffer I/O error on dev loop3, logical block 128, lost async page write [ 80.782275][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.793438][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.804630][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.816214][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0